Privacy Policy at tk099

Introduction

Welcome to tk099 — a trusted online gaming platform built exclusively for players in Bangladesh. We operate tk099.org and all associated subdomains, mobile-optimised pages, and services connected to the tk099 brand. This Privacy Policy governs how we handle the personal information of every visitor, registered player, and customer who interacts with our platform, whether through a mobile browser, the tk099 website, or any communication channel we operate.

By accessing tk099.org, creating an account, making a deposit via bKash, Nagad, Rocket, or Upay, placing a bet on cricket or any other game, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this policy, please discontinue use of the platform immediately.

This policy applies to all users located in Bangladesh, including residents of Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. tk099 is intended for adults aged 21 and above. We do not knowingly collect data from individuals under 21 years of age.

Information We Collect

tk099 collects personal information in three broad categories: information you provide directly, information generated by your use of the platform, and information received from trusted third-party service providers. We collect only the minimum data required to deliver a safe, reliable, and personalised gaming experience.

Information You Provide Directly

• Full name and date of birth (for age verification — 21+ requirement)
• Email address and mobile number (primary contact and notification delivery)
• National ID (NID) or passport details for KYC verification, as required for high-tier accounts
• Preferred payment method details (bKash number, Nagad number, Rocket number, Upay account)
• Customer support communications and any documents you submit for dispute resolution

Automatically Collected Usage Data

• Device type, operating system version, mobile browser type, and screen resolution
• IP address and approximate geolocation (city-level, not GPS coordinates)
• Session duration, pages visited, games played, bets placed, and deposit/withdrawal history
• Referring URL, time and date of access, and navigation patterns within the platform

Information from Third-Party Partners

• Identity verification results from KYC service providers (pass/fail status, not raw document data)
• Payment gateway confirmation data from bKash, Nagad, Rocket, and Upay (transaction IDs only — no card numbers are ever stored)
• Fraud-detection signals shared by our anti-fraud partners to protect the integrity of the platform

How We Use Your Information

tk099 uses personal data for clearly defined purposes only. We do not use your data in ways that you would not reasonably expect. Specifically, we use your information to:

• Create and manage your tk099 account, including authenticating your identity at login
• Process deposits and withdrawals securely via bKash, Nagad, Rocket, Upay, Visa, and Mastercard
• Deliver personalised game recommendations — cricket betting, slots, live casino, and crash games — based on your in-platform behaviour
• Communicate with you about account status, deposit confirmations, withdrawal updates, bonus eligibility, and important platform notices
• Comply with responsible gaming obligations, including monitoring for problem gambling patterns and enforcing self-exclusion requests
• Detect and prevent fraudulent activity, money laundering, and unauthorised account access
• Analyse aggregated platform usage trends to improve the quality, speed, and security of our services

We will never use your personal data for purposes beyond those stated above without first obtaining your explicit consent. Where we rely on legitimate interest as a lawful basis, we always ensure that our interest does not override your fundamental right to privacy.

Sharing of Information

tk099 maintains a strict internal policy against selling, renting, or trading personal data. However, certain carefully vetted third parties receive limited data access to help us deliver core platform functions. Each category is described below.

Payment Processors

To complete deposits and withdrawals, we share transaction-related data (amount, account identifier, time-stamp) with our payment partners: bKash, Nagad, Rocket, Upay, Visa, and Mastercard. These partners are bound by their own data protection agreements and applicable financial regulations. tk099 never stores full card numbers or mobile wallet PINs.

KYC and Identity Verification Partners

For accounts that reach higher deposit thresholds or trigger verification requirements, we share the minimum identity information necessary with our KYC provider to confirm that you meet the 21+ age restriction and are the genuine account holder. KYC partners are contractually obligated to process your data solely for verification purposes.

Game and Software Providers

Certain gameplay data (bet amounts, game session IDs, RTP logs) is shared with game providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi in order to render games, calculate results fairly, and resolve disputes. These providers do not receive your name, contact details, or payment information.

Legal and Regulatory Disclosure

tk099 may disclose personal data to law enforcement, regulatory authorities, or courts when required by applicable law, lawful court order, or enforceable government request. We will always attempt to notify affected users in advance where legally permitted to do so, unless notification is prohibited by law or would compromise an active investigation.

Cookies and Tracking Technologies

tk099 uses cookies and similar lightweight tracking technologies to keep our platform functional, secure, and responsive. We do not deploy advertising cookies or sell cookie-derived data to ad networks. The types of cookies we use are:

• Essential Cookies — required for login sessions, navigation, and security tokens. Disabling these will prevent you from using the platform.
• Performance Cookies — collect anonymised data on page load times, error rates, and feature usage to help our engineering team optimise the mobile experience.
• Preference Cookies — remember your language choice (English/Bengali), notification preferences, and last-visited game categories.
• Security Cookies — used to detect suspicious login attempts, bot traffic, and repeated failed authentication, as part of our fraud prevention system.

You can manage or clear cookies via your mobile browser settings at any time. Please note that removing essential cookies will log you out of your tk099 account and may affect platform functionality. We do not use browser fingerprinting for tracking purposes beyond basic device-type identification.

Data Security Measures

The security of your personal data is our operational priority. tk099 has implemented a multi-layered security framework designed to protect your information both in transit and at rest. Our security posture is reviewed and updated on a regular cycle to address emerging threats.

The specific security controls we maintain include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and tk099 servers — the same standard used by major banks in Bangladesh
• Encrypted storage of all passwords using industry-standard hashing algorithms — plain-text passwords are never stored anywhere on our infrastructure
• Regular independent security audits and fair-play certification testing to verify the integrity of our RNG (Random Number Generator) systems
• Strict internal access controls ensuring that only authorised personnel with a legitimate operational need can view personal data, and all such access is logged and auditable

Data Retention

tk099 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, to resolve disputes, and to enforce our agreements. Account data is retained for the duration of your active account. Following account closure, core identity and financial records are retained for a period consistent with applicable financial regulations, after which they are securely deleted or anonymised.

Session and analytics data that does not identify you personally (aggregated usage statistics, anonymised performance metrics) may be retained indefinitely in an anonymised form for platform improvement purposes. You may request early deletion of your account data at any time by contacting our support team — see the Contact Us section below.

Your Privacy Rights

tk099 respects your right to control your own personal data. As a user of our platform, you have the following rights with respect to the personal information we hold about you. To exercise any of these rights, contact our support team at [email protected] with your registered account details.

Right of Access

You may request a copy of all personal data tk099 holds about you. We will provide this in a readable format within a reasonable timeframe, subject to identity verification.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. We encourage you to keep your profile details up to date directly through your account settings where possible.

Right to Erasure

You may request deletion of your personal data. We will honour such requests where no overriding legal obligation requires us to retain the data. Note that certain financial transaction records must be retained as required by applicable regulations, even after account closure.

Right to Restrict Processing

You may request that we restrict how we use your data in certain circumstances — for example, while a correction request is being reviewed or while you contest the lawfulness of our processing.

Right to Object

You have the right to object to our processing of your personal data where we rely on legitimate interest as the lawful basis. You also have the absolute right to opt out of any direct marketing communications from tk099 at any time.

Payment Data and Third-Party Processors

tk099 supports deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard — the payment methods most trusted by players across Bangladesh. When you initiate a financial transaction, you are redirected to the payment provider's secure environment. tk099 does not directly handle, capture, or store sensitive payment credentials such as card numbers, CVV codes, bKash PINs, or Nagad mPIN values at any point in the transaction flow.

What tk099 does retain is the transaction confirmation record: a unique transaction ID, the amount in BDT (Bangladeshi Taka), the timestamp, and the masked account identifier (for example, the last four digits of a card or the first three digits of a bKash number). This record is necessary for our customer support team to verify payment disputes, process manual withdrawal approvals, and maintain accurate account ledgers.

Age Restriction — 21+ Only

tk099 is strictly intended for adults aged 21 years and above. We do not knowingly collect, store, or process personal data from individuals under the age of 21. During the registration process, users are required to confirm their date of birth, and accounts that cannot be verified as belonging to an adult aged 21 or older will be suspended pending KYC review.

If you are a parent or guardian and believe that a minor has registered an account on tk099 without your knowledge, please contact us immediately at [email protected]. We will promptly investigate and, where confirmed, permanently delete the minor's account and all associated personal data without delay.

Changes to This Privacy Policy

tk099 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, platform features, legal requirements, or applicable regulations. When a material change is made, we will update the 'Last Updated' date at the top of this page and, where appropriate, notify registered users via the email address or mobile number associated with their account.

Your continued use of tk099 following the posting of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically. If you disagree with any revised terms, you should discontinue your use of the platform and may request deletion of your account data by contacting our support team.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data tk099 holds about you, please reach out to our dedicated privacy support team. We aim to respond to all data-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6).