Privacy Policy for tk972

1 Introduction & Scope

This Privacy Policy ("Policy") describes how tk972 ("the Platform", "we", "us", "our") collects, uses, stores, discloses and protects the personal information of individuals ("you", "your", "the Player") who access or use the tk972 website located at https://tk972.org and any associated services, mobile experiences, promotions or features made available through the Platform.

This Policy applies to all personal data collected by tk972 in connection with your use of the Platform, regardless of the device or method of access. It covers data collected during account registration, identity verification (KYC), deposits and withdrawals, gameplay activity, promotional participation, customer support interactions, and general browsing of the Platform.

By registering an account on tk972, making a deposit, or otherwise using the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform and should request account closure.

This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which are available on the tk972 website and which together form the complete legal framework governing your relationship with the Platform.

2 Personal Data We Collect

tk972 collects personal data from you through several different means and at several different stages of your interaction with the Platform. The categories of personal data we collect are set out below:

Registration Data: When you create a tk972 account, we collect your full legal name as it appears on your national identity document, your date of birth, your Bangladesh mobile phone number, your email address, and the username and password you choose for your account. This data is collected directly from you at the point of registration.

Identity Verification (KYC) Data: As part of our Know Your Customer process, we collect copies of identity documents you submit for verification purposes. Acceptable documents include your Bangladesh National Identity Card (NID), Bangladesh passport, or such other documents as tk972 may specify. The KYC data collected includes document images, document numbers, and the personal details contained within those documents, including your photograph where present.

Financial Data: When you make deposits or withdrawals, we collect information about the payment method used, including your bKash or Nagad mobile wallet number, bank account details where applicable, transaction reference numbers, deposit and withdrawal amounts in BDT, and the timing of transactions. tk972 does not store full card numbers or full mobile banking PINs.

Gaming Activity Data: The Platform automatically records data relating to your gaming activity, including the games and betting markets you access, the bets and wagers you place and their outcomes, session durations, and your account balance history. This data is used for account management, responsible gaming monitoring, fraud prevention, and dispute resolution.

Technical & Device Data: When you access the Platform, our servers automatically collect certain technical information, including your IP address, device type, operating system, browser type and version, and session timestamps. This information is used to ensure the Platform functions correctly on your device, to detect and prevent fraud, and for internal analytics.

3 How We Use Your Data

tk972 processes your personal data for the following specific purposes. Each purpose is supported by a lawful basis for processing, as set out below:

• Account Management: We use your registration and verification data to create and maintain your tk972 account, to authenticate your identity when you log in, and to administer your account settings and preferences. Lawful basis: performance of a contract.
• Payment Processing: We use your financial data to process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks, to maintain accurate account balance records, and to provide transaction histories. Lawful basis: performance of a contract.
• Identity Verification & KYC Compliance: We use your KYC documentation to verify your identity, confirm your age as 18 or above, and satisfy our anti-money laundering obligations. Lawful basis: legal obligation and legitimate interests.
• Fraud Prevention & Security: We analyse technical data, gaming activity data, and financial data to detect and prevent fraudulent activity, account takeover attempts, money laundering, and any other abuse of the Platform. Lawful basis: legitimate interests and legal obligation.
• Responsible Gaming Monitoring: We monitor gaming activity data to identify patterns that may indicate problem gambling behaviour, to apply responsible gaming tools when triggered, and to action self-exclusion requests. Lawful basis: legitimate interests and legal obligation.
• Customer Support: We use communications data and account data to respond to your support queries, investigate disputes, and resolve complaints. Lawful basis: performance of a contract.
• Promotions & Bonuses: Where you have opted in to receive promotional communications, we use your contact data and gaming activity data to send you relevant bonus offers and platform news. Lawful basis: consent. You may withdraw consent at any time.
• Platform Improvement & Analytics: We use anonymised and aggregated technical and gaming activity data to analyse Platform performance, identify areas for improvement, and develop new features. Lawful basis: legitimate interests.
• Legal Compliance: We may process and disclose your personal data where required to do so by applicable law, court order, or instruction from a lawful authority. Lawful basis: legal obligation.

4 Cookies & Tracking Technologies

The tk972 Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your login session, and to gather anonymous analytics data about how the Platform is used. This section explains what cookies we use and how you can manage them.

What Are Cookies? Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit, such as your login status and preferences, making your next visit easier and the site more useful to you.

Managing Cookies: You can control and delete cookies through your browser settings at any time. Please note that disabling essential cookies may prevent certain features of the tk972 Platform from functioning correctly, including your ability to log in to your account. Disabling analytics or preference cookies will not affect your ability to use the Platform's core features.

5 Data Sharing & Third Parties

tk972 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes under any circumstances. Personal data is shared with third parties only in the limited circumstances described below, and only to the minimum extent necessary:

• Payment Service Providers: We share the financial data necessary to process your deposits and withdrawals with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank and Sonali Bank. These providers receive only the data required to process the specific transaction you have initiated.
• Game Content Providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi may receive limited technical session data in order to deliver their games through the tk972 Platform. These providers operate under their own privacy and data protection frameworks, which include obligations to handle player data securely.
• Identity Verification Services: To fulfil our KYC obligations, we may share identity document data with third-party identity verification service providers. These providers are contractually bound to use the data solely for the purpose of verification and to maintain appropriate security standards.
• Legal and Regulatory Authorities: tk972 may disclose your personal data to law enforcement agencies, regulatory authorities, or other public bodies where required to do so by applicable law, court order, or lawful direction from a competent authority. In such cases, tk972 will disclose only the minimum data required to comply with the legal obligation.
• Anti-Fraud and Security Services: We may share technical and financial data with specialist anti-fraud and cybersecurity service providers to assist in detecting and preventing fraud, money laundering, and other illegal activity on the Platform.
• Business Transfers: In the event that tk972 undergoes a merger, acquisition, or sale of all or a material part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material change to how your data is handled as a result.

6 Data Retention & Storage

tk972 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as is required by applicable legal, regulatory, or contractual obligations. The following retention periods apply to the main categories of personal data we hold:

• Account & Registration Data: Retained for the duration of your active account relationship with tk972, plus a minimum of five years following account closure. This retention period reflects our AML and fraud-prevention obligations under applicable law.
• KYC / Identity Verification Data: Retained for a minimum of five years from the date of verification, or from the date of account closure, whichever is later. This reflects our legal obligations relating to identity record-keeping and anti-money laundering compliance.
• Financial Transaction Data: Individual transaction records are retained for a minimum of five years from the date of the transaction. This period reflects applicable financial record-keeping requirements.
• Gaming Activity Data: Retained for the duration of your active account, plus a minimum of three years following account closure. This data may be needed to resolve disputes or respond to regulatory enquiries arising after account closure.
• Communications Data: Support chat logs and email correspondence are retained for a minimum of two years from the date of the communication, or longer where the communication is relevant to an ongoing dispute or legal matter.
• Technical / Cookie Data: Server log data and analytics data are retained for a maximum of 13 months, after which time they are deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

7 Data Security Measures

tk972 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes the following measures:

• SSL/TLS Encryption in Transit: All data exchanged between your device and the tk972 Platform is protected by SSL/TLS encryption, ensuring that your personal and financial information cannot be intercepted or read by any third party during transmission.
• Encryption at Rest: Sensitive data stored in tk972's systems — including KYC documents, financial records, and account credentials — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within tk972's internal systems is restricted on a strict need-to-know basis. Only authorised personnel who require access to your data in order to perform their role are granted access, and all access events are logged.
• Password Hashing: Account passwords are never stored in plain text. All passwords are cryptographically hashed using a secure, salted hashing algorithm before being stored. This means that even in the unlikely event of a data breach, your actual password cannot be recovered from our stored records.
• Two-Factor Authentication: tk972 offers two-factor authentication (2FA) as an additional layer of security on player accounts. We strongly recommend that all account holders enable 2FA to protect their account from unauthorised access.
• Fraud Detection Systems: tk972 employs automated fraud detection and monitoring systems that continuously analyse account activity, login patterns, and transaction behaviour to identify and block suspicious activity in real time.
• Regular Security Reviews: tk972 conducts regular internal security reviews and assessments of its data protection practices. Where vulnerabilities are identified, they are addressed promptly.

In the event of a data security incident that is likely to result in a risk to the rights and freedoms of affected account holders, tk972 will take prompt action to contain the incident and will notify affected players without undue delay, providing details of the nature of the incident and the steps we are taking in response.

8 Your Rights & Choices

As a player on the tk972 Platform, you have a number of rights in relation to the personal data that we hold about you. These rights are set out below, together with information on how to exercise them:

• Right of Access: You have the right to request a copy of the personal data that tk972 holds about you. We will provide this information in a clear, plain-English format within a reasonable timeframe following receipt of a verified request.
• Right to Rectification: If you believe that any personal data that tk972 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update certain account details directly within your account settings, or contact support to request corrections to data that you cannot update yourself.
• Right to Erasure: You may request that tk972 delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn your consent and there is no other lawful basis for continued processing. Please note that this right is subject to our legal obligations — we are required to retain certain categories of data (such as KYC and financial records) for defined minimum periods under applicable law, and erasure requests cannot override these obligations.
• Right to Restrict Processing: You may request that tk972 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Object: You have the right to object to our processing of your personal data where that processing is based on our legitimate interests. You also have an unconditional right to object to processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where tk972 processes your personal data on the basis of your consent (for example, for the purpose of sending you promotional emails), you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place before the withdrawal. To opt out of marketing communications, use the unsubscribe link in any email or contact our support team.
• Right to Data Portability: Where processing is based on your consent or a contract and is carried out by automated means, you may request that we provide your personal data to you in a commonly used, machine-readable format.

9 Minors & Age Verification

The tk972 Platform is an adult gambling service strictly restricted to individuals aged 18 and above. We do not knowingly collect, process, or store personal data relating to persons under the age of 18. Our registration process requires all applicants to provide their date of birth, and our KYC verification process requires documentary confirmation of age before any real-money activity is permitted on an account.

Where tk972 has reasonable grounds to suspect that an account holder may be under the age of 18, the account will be suspended immediately pending age verification. If, following investigation, it is confirmed that the account holder is under 18, the account will be permanently closed, all deposited funds will be returned (net of any real-money wagering activity that has already taken place) to the payment method used for the deposit, and the personal data collected in relation to that account will be retained only for the minimum period required to fulfil our legal reporting obligations, after which it will be securely deleted.

tk972 cooperates fully with any legal authority or child protection organisation investigating a complaint relating to underage access to the Platform. We will provide all relevant records and assistance required under applicable law in such cases.

10 Policy Updates & Contact

Policy Updates: tk972 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes to the Platform's features or services, or changes in applicable law. When material changes are made to this Policy, we will update the "Last Updated" date at the top of this page. For significant changes that materially affect how we process your personal data, we will make reasonable efforts to notify registered account holders via their registered email address or via a notice displayed on the Platform.

It is your responsibility to review this Privacy Policy periodically to stay informed about how tk972 handles your personal data. Your continued use of the Platform following the posting of any revised Policy constitutes your acceptance of the changes. If you do not agree with any change to this Policy, you should stop using the Platform and request account closure.

Contact for Privacy Enquiries: If you have any questions, concerns, or complaints about this Privacy Policy or about the way in which tk972 handles your personal data, please contact us using the details below. Our privacy team aims to respond to all enquiries within 10 BST business days of receipt.

• Email: [email protected] (plain text — not a link)
• Live Chat: Available 24/7 via your tk972 account (BST, UTC+6)
• Response Time: Within 10 BST business days for written requests
• Serving Players in: Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh & Cox's Bazar