tkapk Privacy Policy — How We Protect Your Personal Data
At tkapk, protecting the personal information of our Bangladeshi players is a core operational commitment. This Privacy Policy explains precisely what data we collect when you use the tkapk platform, why we collect it, how it is stored and secured, and what rights you hold over your own information. We believe transparency is the foundation of a trustworthy relationship.
Privacy at a Glance
Six Core Privacy Commitments
Before reading the full policy, here are the six most important data-protection principles that guide every tkapk decision about your personal information.
SSL Encryption on Every Connection
Every connection between your browser and the tkapk platform is protected by industry-standard SSL/TLS encryption. This means your personal details, payment data, and login credentials are always transmitted through a secure, encrypted channel — never in plain text that could be intercepted.
Minimum Necessary Data Collection
tkapk collects only the personal information that is genuinely required to operate the platform, complete KYC verification, process bKash and Nagad transactions, and comply with applicable compliance obligations. We do not collect personal data speculatively or beyond what is needed for the stated purpose.
No Sale of Personal Data
tkapk does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data is used solely for the operational purposes described in this Privacy Policy and is never monetised as a standalone product.
Defined Retention Periods
Personal data held by tkapk is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable compliance obligations. Once a retention period has elapsed, data is securely deleted or anonymised in accordance with our internal data lifecycle procedures.
Your Rights Are Respected
tkapk respects your rights to access, correct, and in certain circumstances request deletion of the personal data we hold about you. Requests are handled by our compliance team within 30 days of receipt. You can contact the team at any time via the live chat support channel available after completing the tkapk login.
Opt-Out of Marketing Communications
If you have opted in to receiving promotional emails or SMS notifications from tkapk, you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting the support team. Opting out of marketing does not affect your ability to use the platform or receive operational service messages.
1 Information We Collect
When you register for a tkapk account, use the platform, or contact the support team, tkapk collects various categories of personal information. The specific data collected depends on the nature of your interaction with the platform. This section details each category.
1.1 Registration Data
When you create a tkapk account, we collect the information you provide during the sign-up process, which includes:
- Your full legal name as it appears on your government-issued identity document
- Date of birth (used to verify you are 18 years of age or older)
- Registered mobile number (used for account verification, OTP delivery, and support contact)
- Email address (used for account notifications and security alerts)
- Preferred username and password (password is stored in hashed form — we never store passwords in plain text)
- City and division of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar)
1.2 KYC Identity Verification Data
Before processing your first withdrawal, tkapk's compliance team requires you to complete a Know Your Customer (KYC) identity verification process. During KYC, we collect:
- A copy of your government-issued photo identity document (National Identity Card, Bangladeshi passport, or BRTA driver's licence)
- A recent selfie photograph for facial match verification against your identity document
- Proof of payment method ownership (for example, a screenshot confirming that the bKash, Nagad, or Rocket account is registered in your name)
- Proof of address if required during enhanced due diligence review
KYC Document Security. All identity documents submitted for KYC are stored in encrypted form and are accessible only to authorised members of tkapk's compliance team. Documents are never shared with third parties except where required by law or for the purpose of identity verification by an accredited third-party verification service.
1.3 Transaction Data
Every financial transaction you carry out on the tkapk platform generates a transaction record. This record includes the transaction type (deposit or withdrawal), the amount in BDT (Bangladeshi Taka), the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard), the transaction timestamp in Bangladesh Standard Time (BST, UTC+6), and a transaction reference number. Transaction records are retained for compliance purposes.
1.4 Gameplay and Betting Data
tkapk records the details of your gaming and betting activity on the platform, including the games played (slots, live dealer tables, sports betting markets), wagers placed, results, and session durations. This data is used for account management, bonus tracking, responsible gaming monitoring, and dispute resolution. Gameplay data is associated with your account and is not anonymised while your account remains active.
1.5 Technical and Device Data
When you access the tkapk platform, our servers automatically collect technical information about your device and connection. This includes your IP address, browser type and version, operating system, device type (mobile or desktop), and pages visited within the platform. This data is used for security monitoring, fraud detection, and platform performance optimisation.
1.6 Communication Data
If you contact tkapk's customer support team via live chat, the content of those conversations is recorded and retained for quality assurance, staff training, and dispute resolution purposes. Support chat records are associated with your account and retained for a period of 12 months from the date of the conversation.
2 How We Use Your Data
tkapk uses the personal information collected from you for the specific purposes described in this section. We do not use your personal data for any purpose that is incompatible with the purpose for which it was originally collected without first obtaining your consent.
| Purpose | Data Used |
|---|---|
| Account creation and management | Registration data, contact details, login credentials |
| Identity verification (KYC) | Identity documents, selfie photograph, payment method proof |
| Deposit and withdrawal processing | Transaction data, payment method details, KYC status |
| Fraud prevention and security | IP address, device data, transaction history, login activity |
| Responsible gaming monitoring | Gameplay data, session duration, deposit frequency, self-exclusion status |
| Bonus and promotion management | Gameplay data, transaction data, account history |
| Customer support | Communication data, account details, transaction history |
| Marketing communications (with consent) | Email address, mobile number, gameplay preferences |
| Platform analytics and improvement | Technical data, anonymised gameplay patterns |
2.1 Marketing Communications
tkapk may send you promotional communications — including bonus offers, seasonal promotions tied to events such as BPL, IPL, Eid, and Pohela Boishakh, and platform news — by email or SMS to your registered contact details. Marketing communications are sent only where you have given your explicit consent at registration or subsequently opted in via your account settings. You may withdraw consent at any time, as described in Section 7 of this Privacy Policy.
3 Legal Basis for Processing
tkapk processes your personal data on the following legal bases depending on the nature of the processing activity:
- Contractual necessity: Processing your registration data, KYC documents, and transaction data is necessary to perform our contract with you — that is, to provide you with access to the tkapk platform, process your deposits and withdrawals, and manage your account.
- Legal obligation: Processing your identity documents and transaction history for KYC and anti-money-laundering (AML) compliance is required by applicable compliance standards. tkapk retains this data for the periods mandated by those obligations.
- Legitimate interests: Processing your technical and device data for fraud prevention, security monitoring, and platform performance optimisation is carried out on the basis of tkapk's legitimate interest in maintaining a safe, secure, and reliable platform for all users.
- Consent: Sending you marketing and promotional communications by email or SMS is carried out only where you have given your explicit, freely given, specific, and informed consent. Consent may be withdrawn at any time without affecting the lawfulness of any processing carried out prior to withdrawal.
No Automated Decision-Making. tkapk does not make decisions that significantly affect you based solely on automated processing of your personal data, without any human review. Where automated tools are used for fraud detection or responsible gaming monitoring, flagged cases are reviewed by a member of the tkapk compliance team before any account action is taken.
4 Data Sharing & Disclosure
tkapk does not sell, rent, or trade your personal data to third parties. However, in order to operate the platform and comply with applicable obligations, tkapk shares personal data with the following categories of third-party recipients under strict data processing agreements:
4.1 Payment Service Providers
To process your deposits and withdrawals, tkapk transmits the minimum necessary transaction data to the relevant payment service providers — including bKash, Nagad, Rocket, Upay, and card processing networks (Visa, Mastercard). This data is used solely for the purpose of completing the financial transaction and is governed by the privacy policies of those respective providers.
4.2 Identity Verification Services
To complete KYC verification, tkapk may use an accredited third-party identity verification service to assist in authenticating the documents you submit. Any such service provider is contractually bound to use your data only for verification purposes and to maintain appropriate security standards.
4.3 Game Content Providers
Game titles on the tkapk platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. These providers may receive a session token and anonymised player identifier to enable gameplay. They do not receive your full name, identity documents, or payment details.
4.4 Legal and Regulatory Disclosure
tkapk may disclose your personal data to law enforcement authorities, regulatory bodies, or other third parties where required to do so by applicable law, court order, or regulatory direction. Such disclosures are made only to the extent required and are logged internally.
No Cross-Border Transfers Without Safeguards. Where any of tkapk's third-party service providers are based outside Bangladesh, tkapk ensures that appropriate contractual safeguards are in place before any personal data is transferred internationally. tkapk does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate protective measures.
5 Cookies & Tracking
The tkapk platform uses cookies and similar tracking technologies to deliver a functional and personalised experience. This section explains what cookies we use and why.
5.1 What Are Cookies?
Cookies are small text files that are stored on your device by your browser when you visit a website. They allow the website to recognise your device on subsequent visits and remember certain preferences or session states. Cookies themselves do not contain executable code and cannot access other files on your device.
5.2 Categories of Cookies Used by tkapk
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain your login session, remember your account state, enable secure payment flows | Session / up to 24 hours |
| Functional | Remember your language and display preferences, store responsible gaming limit settings | Up to 12 months |
| Analytics | Understand how players navigate the platform, identify popular games and pages, improve UX | Up to 24 months |
| Security | Detect and prevent fraudulent login attempts and suspicious account activity | Session / up to 30 days |
5.3 Managing Cookies
Most modern browsers allow you to control cookie settings through the browser's preferences or settings menu. You may choose to block all non-essential cookies, delete existing cookies, or be notified before a cookie is set. Please note that blocking strictly necessary cookies will impair the core functionality of the tkapk platform, including the ability to log in and complete financial transactions.
6 Data Retention
tkapk retains personal data for as long as is necessary to fulfil the purpose for which it was collected and to comply with applicable legal obligations. The retention periods for the main categories of personal data are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Contractual and compliance obligation |
| KYC identity documents | 5 years from account closure | AML compliance obligation |
| Transaction records | 5 years from transaction date | Financial compliance obligation |
| Gameplay and betting history | Duration of account + 2 years after closure | Contractual and dispute resolution |
| Support chat records | 12 months from conversation date | Quality assurance and dispute resolution |
| Technical and device logs | 90 days from collection | Security and fraud monitoring |
| Marketing consent records | Until consent is withdrawn + 3 years | Consent and compliance evidence |
Upon expiry of the applicable retention period, personal data is either securely deleted from tkapk's systems or anonymised in such a way that it can no longer be attributed to any individual. Anonymised and aggregated data may be retained indefinitely for statistical and analytical purposes.
7 Your Privacy Rights
As a tkapk player, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact the tkapk compliance team via live chat after completing the tkapk login, or by emailing [email protected] (plain text — not a clickable link). All requests will be acknowledged within 5 business days and resolved within 30 calendar days of receipt.
7.1 Right of Access
You have the right to request a copy of the personal data that tkapk holds about you, along with information about how that data is used and stored. This is sometimes referred to as a Subject Access Request (SAR). tkapk will provide a copy of your personal data in a structured, commonly used format.
7.2 Right to Rectification
If any personal data held by tkapk about you is inaccurate or incomplete, you have the right to request that it be corrected. Certain data fields (such as your registered name) may require updated KYC documentation before a correction can be processed.
7.3 Right to Erasure
In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to limitations — in particular, tkapk is required to retain certain data categories for compliance purposes (as described in Section 6) and cannot delete data that is subject to a mandatory retention period. Where erasure is not possible for a specific data category, tkapk will explain the reason clearly.
7.4 Right to Withdraw Marketing Consent
If you have consented to receive marketing communications from tkapk, you may withdraw that consent at any time by visiting your account settings and updating your communication preferences, or by contacting the support team. Withdrawal of marketing consent does not affect the processing of data required to operate your account or process transactions.
7.5 Right to Restriction
You may request that tkapk restrict the processing of your personal data in certain circumstances — for example, if you contest the accuracy of the data while tkapk is verifying it, or if you object to processing based on legitimate interests while tkapk assesses your objection. While a restriction is in place, tkapk may store the data but will not actively process it.
Identity Verification for Rights Requests. To protect your personal data from unauthorised access, tkapk will verify your identity before processing any privacy rights request. This may involve confirming details associated with your registered account or, for sensitive requests, completing a short verification process. This step is taken in your interest and does not create an undue barrier to exercising your rights.
8 Data Security
tkapk implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key security measures in place include:
- SSL/TLS encryption on all data transmitted between your device and the tkapk platform, ensuring that your login credentials, financial details, and personal information are never transmitted in plain text
- Encrypted data storage for all sensitive personal data held on tkapk's servers, including KYC identity documents and payment method records
- Hashed password storage — passwords are never stored in readable form; they are converted to a one-way cryptographic hash so that even tkapk staff cannot read your password
- Two-factor authentication (2FA) via OTP to your registered mobile number for account login and withdrawal confirmation
- Access control — access to personal data held on tkapk's internal systems is restricted to authorised personnel on a strict need-to-know basis, governed by role-based access controls
- Fraud and intrusion monitoring — tkapk's security team monitors platform activity continuously for signs of unauthorised access, credential stuffing, and other security threats
- Regular security reviews — tkapk's platform and data handling practices are reviewed periodically to identify and address new security risks
8.1 Data Breach Response
In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, tkapk will notify affected account holders without undue delay via the email address or mobile number on record. The notification will describe the nature of the breach, the data categories affected, the steps tkapk has taken to contain and remediate the breach, and the recommended steps affected players should take to protect themselves.
Your Role in Account Security. While tkapk maintains robust platform-side security, the security of your account also depends on your own practices. You should use a strong, unique password for your tkapk account, never share your login credentials with anyone, and contact tkapk support immediately if you suspect unauthorised access. tkapk will never ask for your password via live chat, email, or any other channel.
8.2 Contact for Privacy Matters
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data tkapk holds about you, please contact the tkapk compliance and support team via live chat available from your account dashboard after completing the tkapk login. Alternatively, you may write to the team by email at [email protected] (plain text — not a clickable link). The support team is available 24 hours a day, 7 days a week, including Bangladeshi public holidays, and responds to all privacy-related inquiries in English.
tkapk reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. Where a material change is made, registered players will be notified via their registered email address or mobile number with a minimum of 7 days' advance notice before the updated policy takes effect. The effective date at the top of this document will be updated with each revision. Continued use of the tkapk platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms.
Your Data Is Safe — Now Enjoy the Platform
Now that you understand how tkapk protects your privacy, explore the full range of games and betting markets available to Bangladeshi players. Our support team is available 24/7 if you have any further questions.