tk1bd Privacy Policy —
How We Handle Your Personal Data

1. Introduction

This Privacy Policy ("Policy") is published by tk1bd ("we", "us", "our"), the operator of the online betting and casino platform accessible at tk1bd.io. It governs the collection, processing, storage, and disclosure of personal data relating to individuals ("you", "your", "the Player") who access or use the tk1bd platform, whether via desktop browser, mobile browser, or any other means.

tk1bd is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy is designed to give you a clear and honest account of how your data is used — written in plain English, without unnecessary complexity or legal obfuscation.

By registering an account, making a deposit, placing a bet, or otherwise using any feature of the tk1bd platform, you acknowledge that you have read this Privacy Policy and that you consent to the collection and use of your personal data in the manner described herein. If you do not agree with any part of this Policy, you should not use the tk1bd platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are integral to the overall agreement between tk1bd and the Player.

2. Data We Collect

tk1bd collects only the personal data that is necessary to provide our services, comply with our legal obligations, and maintain the security and integrity of the platform. The categories of personal data we collect include the following:

2.1 Identity & Registration Data

• Full legal name as it appears on your national identity document.
• Date of birth (required to verify that you meet the 21+ age requirement).
• Gender (where provided voluntarily during registration).
• Username and account password (stored in hashed, non-reversible form).

2.2 Contact Data

• Residential address, including district, division, and postcode within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, Cox's Bazar).
• Mobile phone number registered in your name in Bangladesh.
• Email address used for account communications and promotional correspondence (where opted in).

2.3 Verification & KYC Documents

• Copies of government-issued identity documents (National ID card, passport, or driver's licence) submitted for Know Your Customer (KYC) verification.
• Proof of address documents (utility bills, bank statements) submitted when required for enhanced due diligence.
• Selfie or facial photograph submitted for identity verification purposes where applicable.

2.4 Financial & Transaction Data

• Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers registered in your name).
• Bank account details where bank transfer is used as a payment method.
• Transaction history including deposits, withdrawals, amounts in BDT, timestamps, and transaction reference numbers.
• Betting and gaming history including stake amounts, odds, game type, session duration, and outcomes.

2.5 Technical & Device Data

• IP address at time of registration, login, deposit, and withdrawal.
• Device type, operating system, and browser type and version.
• Screen resolution and preferred language setting.
• Session timestamps and duration, pages viewed, and features used within the platform.

2.6 Communications Data

• Content of support chat transcripts and emails exchanged between you and the tk1bd support team.
• Records of any complaints, disputes, or responsible gaming requests submitted by you.
• Marketing communication preferences (opted in or opted out of promotional emails and notifications).

3. How We Collect Your Data

tk1bd collects personal data through the following methods and touchpoints:

• Direct submission: Data you provide actively when completing the registration form, uploading KYC documents, contacting support, or updating your account profile.
• Automated collection: Technical data gathered automatically when you access the platform, including IP addresses, device identifiers, and session activity logs, via server logs and analytics tools.
• Payment processing: Transaction metadata received from payment processors and mobile money operators (bKash, Nagad, Rocket, Upay) when you initiate a deposit or withdrawal.
• Cookies and similar technologies: Behavioural and preference data collected via cookies, session storage, and local storage when you browse the platform. See Section 9 for full details.
• Third-party verification providers: Identity verification data received from KYC and anti-fraud service providers when we conduct enhanced due diligence checks on your account.
• Correspondence: Any personal information you include in messages sent to our support team via live chat, email, or any other communication channel.

4. How We Use Your Data

tk1bd uses personal data for the following specific, legitimate purposes. We do not use your data for any purpose beyond those listed here without first obtaining your explicit consent:

tk1bd does not use automated decision-making processes — including profiling — to make decisions that produce significant legal or similarly significant effects on individual players, without human review where required.

5. Legal Basis for Processing

tk1bd processes personal data on the following legal grounds, depending on the nature and purpose of the processing activity in question:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered player, including account management, bet settlement, and payment processing.
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money laundering regulations, age verification obligations, and financial record-keeping requirements.
• Legitimate interests: Processing carried out in pursuit of tk1bd's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, and internal analytics.
• Consent: Processing based on your freely given, informed consent — specifically in relation to marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

tk1bd does not sell, rent, or otherwise commercially disclose your personal data to third parties. We share personal data only in the limited, specific circumstances described below:

6.1 Payment Partners

When you initiate a deposit or withdrawal, the relevant transaction data is shared with your chosen payment provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, or Mastercard — solely to process that transaction. These providers are bound by their own data protection and financial services regulations.

6.2 KYC & Identity Verification Providers

Identity documents and verification data may be shared with trusted third-party KYC verification service providers who assist tk1bd in fulfilling its age verification and anti-money laundering obligations. These providers are contractually bound to process data only for the purposes specified by tk1bd and to maintain appropriate security standards.

6.3 Game Content Providers

Game studios and platform providers — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi — may receive anonymised or pseudonymised session data necessary to deliver their games on the tk1bd platform. They do not receive your full identity or financial data.

6.4 Legal & Regulatory Authorities

tk1bd will disclose personal data to competent law enforcement agencies, regulatory bodies, or judicial authorities when legally required to do so, or when disclosure is necessary to prevent or detect fraud, money laundering, or other criminal activity.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of the assets of tk1bd, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any resulting changes to this Privacy Policy.

7. Data Retention

tk1bd retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as required by applicable legal, regulatory, or financial record-keeping obligations. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of your account relationship with tk1bd, and for a minimum of 5 years following permanent account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of 5 years from the date of the transaction, as required for financial compliance and dispute resolution purposes.
• KYC verification documents: Retained for the same period as account and identity data. Copies of identity documents are securely deleted following the expiry of the mandatory retention period.
• Support communications: Retained for up to 3 years following the resolution of the relevant support interaction, or longer if the communication relates to a live dispute or legal matter.
• Technical and session logs: Retained for up to 12 months from the date of collection for security monitoring and fraud detection purposes, after which they are anonymised or deleted.
• Marketing preferences and opt-in records: Retained for as long as you hold an account with tk1bd, or until you withdraw consent, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual.

8. Security Measures

tk1bd implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes the following:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the tk1bd platform, ensuring that your login credentials, payment data, and personal information cannot be intercepted in transit.
• Password hashing using industry-standard cryptographic algorithms, ensuring that your account password is never stored in readable form on our systems.
• Access controls that restrict access to personally identifiable data to only those tk1bd personnel whose role specifically requires it, enforced through role-based permissions and multi-factor authentication on internal systems.
• Encrypted data storage for all sensitive personal data and KYC documents held on tk1bd servers, with data stored in secure, access-controlled environments.
• Regular security assessments including internal audits and vulnerability testing of the tk1bd platform to identify and remediate potential weaknesses before they can be exploited.
• Incident response procedures enabling tk1bd to detect, contain, and respond to data security incidents promptly. In the event of a data breach that poses a risk to your rights, you will be notified without undue delay.

While tk1bd takes all reasonable steps to protect your personal data, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You play an important role in protecting your own account by maintaining a strong, unique password and not sharing your login credentials with anyone.

9. Cookies & Tracking Technologies

tk1bd uses cookies and similar tracking technologies to deliver and improve the platform experience, ensure security, and — where you have given your consent — to understand how players interact with our services. The following categories of cookies are used:

You can manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary or functional cookies may impair the performance and usability of the tk1bd platform. tk1bd does not use cookies to serve third-party advertising or to track your activity on other websites.

10. Your Rights

As a data subject whose personal information is processed by tk1bd, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the tk1bd support team using the details provided in Section 14 of this Policy.

• Right of access: You have the right to request a copy of all personal data that tk1bd holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request the correction of any personal data that is inaccurate, incomplete, or out of date.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations held by tk1bd.
• Right to restriction of processing: You have the right to request that tk1bd restrict the processing of your personal data in certain circumstances, for example while an accuracy dispute is being resolved.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to tk1bd in a structured, commonly used, machine-readable format, and to request that it be transferred to another data controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests, including profiling based on those interests. You may also object to processing for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

tk1bd will respond to all data rights requests within 30 days of receipt. Where a request is complex or relates to a large volume of data, we may extend this period by a further 60 days, in which case we will notify you of the extension within the initial 30-day window. There is no charge for exercising your rights in standard circumstances.

11. Minors & Age Policy

The tk1bd platform is strictly intended for adults aged 21 years and above. tk1bd does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration and withdrawal process, and tk1bd will not activate any account or process any transaction until satisfactory proof of age has been provided.

If tk1bd becomes aware that personal data has been submitted by or on behalf of an individual under the age of 21 — whether through a false declaration of age or any other means — that account will be immediately suspended, all associated data will be securely deleted (subject to any legal obligations to retain specific records), and any deposited funds will be returned to their source after completion of the required compliance checks.

Parents and guardians of individuals under 21 who are concerned about possible unauthorised access to the tk1bd platform are encouraged to use parental control software to restrict access, and to contact the tk1bd support team immediately if they believe a minor has created an account. We will act promptly on all such reports.

12. Third-Party Links

The tk1bd platform may contain references to third-party services — including game studios such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi — whose content is embedded within or displayed through the platform. While tk1bd takes care to partner only with reputable and established providers, we do not control the data practices of third-party software providers and cannot accept responsibility for how they handle any data that passes through their systems in the course of delivering their game content.

Similarly, any external websites that may be referenced within tk1bd communications operate under their own privacy policies, which are entirely independent of this Policy. tk1bd is not responsible for the privacy practices or content of any third-party website or service. We encourage you to review the privacy policy of any third party with whom you interact.

13. Changes to This Policy

tk1bd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the features and services offered on the platform. Where changes are material — such as those that alter how we use your personal data or affect your rights — we will provide advance notice to registered players via the email address associated with their account, with a minimum of 7 days' notice before the revised Policy takes effect.

Minor revisions, such as corrections of typographical errors or clarifications of existing provisions that do not change the substance of the Policy, may be published without prior notification. The "Last Updated" date displayed at the top of this document indicates when the most recent revision was published. We recommend reviewing this Policy periodically to stay informed of any updates.

Your continued use of the tk1bd platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a revision, you should cease using the platform and contact the support team to close your account before the revised Policy takes effect.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of the data subject rights described in Section 10, please contact the tk1bd support team using the details below. We are available 24 hours a day, 7 days a week, and aim to respond to all privacy-related enquiries within 5 business days.

All privacy-related correspondence should be directed to our dedicated support address. Please include your registered account username and a brief description of your request so that we can assist you as efficiently as possible.

tk1bd takes all privacy enquiries seriously. Upon receipt of your request, we will acknowledge it promptly and keep you informed of progress through to resolution. We are committed to resolving all data-related concerns in a fair, transparent, and timely manner consistent with our obligations under this Policy.