tk997 Privacy Policy

This Privacy Policy describes the practices of tk997 ("tk997", "we", "us", or "our") with respect to the collection, use, storage, and disclosure of personal data provided by or collected from individuals ("you" or "your") who access or use the tk997 platform at tk997.io and any related services (collectively, the "Services").

tk997 is committed to protecting the privacy and security of every player who uses our platform. We operate in accordance with recognised data protection principles, including purpose limitation, data minimisation, storage limitation, accuracy, integrity, and confidentiality.

By registering an account with tk997 or continuing to use the Services, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with this policy, you must discontinue your use of the Services.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, which together form the complete agreement governing your use of the tk997 platform.

tk997 collects personal data in the following categories:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where health-related information is voluntarily provided in the context of a responsible gaming request.

tk997 collects your personal data through the following means:

• Direct submission: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact our support team, or update your account profile.
• Automated collection: Through server logs, cookies, pixel tags, and session tracking technologies that record your interactions with the tk997 platform whenever you visit or use the Services.
• Payment processors: When you initiate a transaction via bKash, Nagad, Rocket, Upay, Visa, Mastercard, or USDT, the relevant payment provider shares transaction confirmation data with tk997 to allow us to credit your account.
• Third-party identity verification: Where we use a third-party KYC service provider to verify the authenticity of documents you submit, that provider may return verification outcome data to tk997.
• Fraud detection services: Our automated fraud-monitoring systems generate risk scores and flag records based on behavioural patterns observed during your use of the platform.

tk997 processes your personal data on the following legal bases:

tk997 uses the personal data we collect for the following purposes:

• To create, verify, maintain, and administer your tk997 account.
• To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or USDT).
• To verify your identity and age in compliance with our KYC obligations prior to processing withdrawals or at any other time we are legally required to do so.
• To provide customer support and respond to your enquiries, complaints, and responsible gaming requests.
• To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and other prohibited activities as defined in our Terms & Conditions.
• To monitor your gameplay patterns for responsible gaming purposes, including identifying signs of problem gambling and intervening where appropriate.
• To send you transactional communications such as deposit confirmations, withdrawal notifications, account security alerts, and material changes to our policies.
• To send you promotional communications, including bonus offers, game launches, and seasonal promotions — but only where you have given explicit consent to receive such communications.
• To personalise your experience on the tk997 platform, including displaying games and promotions relevant to your preferences and location within Bangladesh.
• To maintain accurate business records, comply with financial reporting obligations, and respond to lawful requests from regulatory or law enforcement authorities.
• To analyse aggregate, anonymised platform usage data for the purpose of improving the Services, fixing technical issues, and optimising the user experience for players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and all other regions of Bangladesh.

We will not use your personal data for any purpose that is materially different from those listed above without first providing you with notice and, where required, obtaining your consent.

tk997 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below:

All third-party service providers with whom we share personal data are required to maintain appropriate technical and organisational security measures and to process your data only in accordance with our written instructions.

tk997 retains personal data for the periods set out below, after which it will be securely deleted or anonymised:

Where tk997 is involved in active litigation or regulatory proceedings, we may retain relevant data beyond the periods above until those proceedings are fully resolved.

tk997 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport-layer encryption: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL), preventing interception in transit.
• Data-at-rest encryption: Sensitive data stored on our servers, including financial records and KYC documents, is encrypted at rest using AES-256.
• Password hashing: Account passwords are hashed using a modern, salted hashing algorithm. Plain-text passwords are never stored or transmitted.
• Two-factor authentication (2FA): Optional SMS-based 2FA is available to all account holders. We strongly encourage all players to enable this feature.
• Access controls: Access to personal data within tk997 is restricted on a strict need-to-know basis. Staff access is controlled via role-based permissions and audit-logged.
• Intrusion detection: Our infrastructure is monitored continuously by automated intrusion-detection systems that alert our security team to anomalous activity in real time.
• Vulnerability management: We conduct regular security assessments and patch known vulnerabilities promptly.
• Incident response: In the event of a data breach that poses a risk to affected players, tk997 will notify impacted users without undue delay and will take immediate remediation action.

While tk997 takes all reasonable steps to protect your data, no internet transmission or electronic storage method is completely secure. You are also responsible for maintaining the security of your account credentials. Do not share your password with anyone, and contact our support team immediately if you believe your account has been compromised.

tk997 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit our website. They serve the following purposes:

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your tk997 account.

As a tk997 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request":

• Right of Access: You may request a copy of all personal data tk997 holds about you. We will provide this in a structured, commonly used, machine-readable format within thirty (30) calendar days.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you may request that we correct or update it. You may also update many details directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected. This right is subject to our legal retention obligations — we cannot delete data we are required by law to retain (e.g., transaction records for AML purposes).
• Right to Restrict Processing: You may request that we temporarily suspend processing of your personal data in certain circumstances, such as while a dispute regarding its accuracy is being resolved.
• Right to Data Portability: You may request that we provide your personal data to you in a portable format, or transmit it directly to another service provider where technically feasible.
• Right to Object: You may object to processing carried out on the basis of legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

tk997 will respond to all verified data rights requests within thirty (30) calendar days. In complex cases, we may extend this period by a further two months, in which case we will notify you within the initial thirty-day period and explain the reason for the extension.

We will not charge a fee for processing a data rights request unless the request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or refuse to act on the request.

The tk997 platform is strictly for adults aged 21 and above. We do not knowingly collect, process, or store personal data from any person under the age of 21. Our registration system includes age-verification checks designed to prevent underage individuals from creating accounts.

If tk997 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete all associated personal data to the extent permitted by our legal obligations, and void any gameplay activity conducted during the underage period.

If you are a parent or guardian and believe that a minor in your care has registered an account with tk997, please contact our support team immediately at [email protected]. We will investigate and act promptly. We do not direct any marketing material at persons under the age of 21.

The tk997 platform integrates with third-party service providers to deliver core platform functionality. These include game providers (Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, Microgaming), payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification providers, and fraud detection services.

Each third-party provider operates under its own privacy policy and data protection framework. tk997 is not responsible for the privacy practices of these providers beyond our contractual obligations to ensure they maintain adequate security standards when processing data on our behalf.

The tk997 platform does not contain links to external third-party websites beyond those required to facilitate transactions with our payment partners. We are not responsible for the content or privacy practices of any website that is not operated by tk997.

tk997 primarily stores and processes player data on servers located within data centres serving the South and Southeast Asia region. However, certain third-party service providers (such as international game providers and cloud infrastructure services) may process some of your data in jurisdictions outside Bangladesh.

Where personal data is transferred internationally, tk997 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this policy. These safeguards may include contractual data protection clauses, data processing agreements, or transfers only to jurisdictions that provide adequate data protection standards.

If you have questions about the specific safeguards in place for any particular international transfer, please contact us at [email protected].

tk997 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform functionality. Material changes to this policy will be communicated to registered players via email or a prominent notice on the tk997 platform at least fourteen (14) days before the changes take effect.

The "Last Updated" date at the top of this document reflects the date on which the most recent version of this Privacy Policy came into effect. We encourage you to review this page periodically to stay informed of how tk997 protects your data.

Your continued use of the tk997 platform after a revised Privacy Policy has come into effect constitutes your acceptance of the updated terms. If you do not agree with any changes, you must discontinue your use of the Services and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way tk997 handles your personal data, please contact our Data Protection team using the details below:

We take all privacy-related communications seriously and will acknowledge receipt of your enquiry promptly. For formal data rights requests, we may require identity verification before processing your request to protect against unauthorised access to your personal data by third parties.

tk997 serves players across all regions of Bangladesh — including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar — and we are committed to being accessible and responsive to every player who contacts us.