Privacy Policy

How We Use Your Data

tk000 uses the personal data we collect to deliver, maintain, and continuously improve the platform experience for all Bangladeshi players. Below is a complete account of the purposes for which your data is processed.

• Account Management: To create, maintain, verify, and manage your tk000 player account, including processing login credentials, managing account settings, and communicating account-related notifications.
• Transaction Processing: To process deposits, withdrawals, and any other financial transactions you initiate on the platform via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, and to maintain an accurate record of your transaction history in BDT.
• Identity Verification (KYC): To verify your identity and age (18+) in accordance with our responsible gaming obligations and applicable anti-money laundering standards. This includes reviewing submitted identity documents and cross-referencing account data for consistency.
• Platform Personalisation: To present you with game recommendations, promotional offers, and content relevant to your gaming history and preferences on tk000, including cricket betting markets aligned with BPL, IPL, and T20 fixtures you have previously engaged with.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, bonus abuse, money laundering, and other prohibited activities. This includes automated risk-scoring of transactions and behaviour patterns.
• Customer Support: To respond to your support queries, process complaints, and resolve disputes. Support communications may be recorded for quality assurance and training purposes.
• Legal Compliance: To fulfil tk000's obligations under applicable laws and regulations, including record-keeping requirements, anti-money laundering obligations, and responding to lawful requests from competent authorities.
• Marketing Communications: To send you promotional emails, SMS, or platform notifications about bonuses, seasonal offers (Eid, Pohela Boishakh), and tournament promotions — but only where you have opted in to receive such communications. You may opt out at any time via your account settings or by contacting [email protected].
• Platform Analytics and Improvement: To analyse aggregated usage data to understand platform performance, identify technical issues, improve game load times, and enhance the overall player experience. Analytics data is processed in anonymised or pseudonymised form where possible.

Data Sharing & Third Parties

tk000 does not sell your personal data. We may share your data with carefully selected third parties only where necessary to deliver the platform services, fulfil legal obligations, or protect the interests of players and the platform. The categories of third parties with whom data may be shared are set out below.

• Payment Processors: Your financial data is shared with the payment providers you choose to use — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard — solely to process your deposit and withdrawal transactions. Each provider operates under its own privacy policy and applicable financial regulations.
• Game Providers: When you play a game delivered by a third-party provider such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, limited technical data (such as a pseudonymised player identifier and session data) is shared with that provider to facilitate game delivery. No financial or identity data is shared with game providers beyond what is operationally required.
• Identity Verification Services: To fulfil our Know Your Customer (KYC) and age verification obligations, tk000 may use third-party identity verification services. These providers receive the documents and data you submit during verification and return a verification outcome. They are contractually bound to handle your data securely and confidentially.
• IT Infrastructure and Hosting Providers: tk000 uses third-party cloud hosting and infrastructure providers to operate the platform. These providers process data on our behalf and under our instruction, and are contractually prohibited from using your data for their own purposes.
• Analytics Providers: Anonymised or pseudonymised usage data may be shared with analytics platform providers to help tk000 understand player behaviour and platform performance. These providers do not receive data that directly identifies you.
• Legal and Regulatory Authorities: tk000 may disclose personal data to law enforcement agencies, financial intelligence units, regulators, or courts where required to do so by a lawful request, court order, or applicable legal obligation. tk000 will notify the affected player of such a disclosure where legally permitted to do so.
• Business Transfers: In the event that tk000 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred as part of that transaction. You will be notified of any such transfer and any material changes to how your data is handled as a result.

Data Retention

tk000 retains your personal data only for as long as is necessary for the purposes described in this Privacy Policy, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide.

• Active Account Data: Personal data associated with an active player account is retained for the full duration of the account's active status, plus a period of up to 5 years following account closure. This retention period supports dispute resolution, fraud investigation, and regulatory compliance obligations.
• Transaction Records: Financial transaction records — including deposit and withdrawal history in BDT — are retained for a minimum of 5 years following the date of the transaction to meet anti-money laundering record-keeping requirements.
• Identity Verification Documents: Copies of identity documents submitted during KYC verification are retained for the duration of the account's active life plus 5 years, or longer where a specific legal obligation applies.
• Support Communications: Customer support correspondence, including emails and chat transcripts, is retained for up to 3 years following the closure of the relevant support case, unless the matter has given rise to a formal legal dispute, in which case records are held until that dispute is fully resolved.
• Marketing Consent Records: Records of your marketing consent choices — including when consent was given or withdrawn — are retained for the duration of your account plus 3 years, to demonstrate compliance with consent requirements.
• Anonymised Analytics Data: Aggregated and fully anonymised usage data from which no individual can be identified may be retained indefinitely for platform performance analysis and business intelligence purposes.

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised. Deletion requests submitted by players may accelerate this timeline where no overriding legal obligation requires continued retention.

Data Security

tk000 implements a comprehensive range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security approach is reviewed and updated on an ongoing basis to address emerging threats and vulnerabilities.

• Encryption in Transit: All data transmitted between your device and the tk000 platform is protected using 256-bit SSL/TLS encryption. This applies to login requests, account data submissions, payment transactions, and all other platform communications.
• Encryption at Rest: Sensitive personal data stored in tk000's systems — including identity documents and financial records — is encrypted at rest using AES-256 encryption. Decryption keys are held separately and subject to strict access controls.
• Access Controls: Access to personal data within tk000's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum access necessary to perform their role, and all access is logged and auditable.
• Two-Factor Authentication: tk000 offers two-factor authentication (2FA) for player accounts. Players are strongly encouraged to enable 2FA through their account security settings to add an additional layer of protection against unauthorised login attempts.
• Penetration Testing: tk000 conducts regular security assessments, including penetration testing by qualified third-party security professionals, to identify and remediate vulnerabilities in the platform before they can be exploited.
• Incident Response: In the event of a data security incident that affects your personal data, tk000 will take immediate containment steps, investigate the cause and scope of the incident, and notify affected players without undue delay where the incident poses a material risk to their rights or interests.
• Vendor Security: All third-party service providers with access to player data are required to demonstrate adequate security practices and are subject to contractual data protection obligations before being granted access to tk000's systems or player data.

This Privacy Policy may be updated periodically to reflect changes in our data practices, legal obligations, or platform features. Material updates will be communicated via a notice on the tk000 platform. The revision date at the top of this page indicates when the policy was last reviewed. Continued use of the tk000 platform following publication of an updated policy constitutes acceptance of the revised terms.

For all privacy-related queries, data rights requests, or concerns about how your personal data is being handled, contact the tk000 compliance team at [email protected]. Support is available around the clock, with fastest response times during Bangladesh Standard Time (BST, UTC+6) business hours.