Privacy Policy — tk6537 Data Practices

tk6537 collects personal data through several channels: information you provide directly when registering and using your account; information generated automatically by your use of the platform; and information received from third-party partners involved in operating our services, such as payment processors and identity verification providers.

1.1 Information You Provide Directly

When you register an account on tk6537 or use our services, you may be asked to provide the following categories of personal information:

• Account registration data: Full legal name, date of birth, email address, phone number, and residential address.
• Identity verification (KYC) documents: Scanned copies or photographs of government-issued photo ID (National ID card, passport, or driving licence), proof of address documents, and proof of payment method ownership.
• Payment information: Mobile banking account references (bKash, Nagad, Rocket, Upay), bank account details, and card numbers (partial — full card numbers are never stored by tk6537 and are processed exclusively by our PCI-DSS compliant payment partners).
• Communications: The content of any messages sent to our support team via live chat, email, or our contact form — including support tickets, complaints, and feedback submissions.
• Responsible gaming preferences: Deposit limits, session time limits, loss limits, cooling-off periods, and self-exclusion requests you submit through Account Settings.

1.2 Information Collected Automatically

When you access the tk6537 platform, certain technical and behavioural data is collected automatically by our systems. This data is used for fraud prevention, platform security, and service improvement:

• Device and browser data: IP address, browser type and version, operating system, device type (desktop, tablet, mobile), screen resolution, and device identifiers.
• Session and usage data: Pages visited, games played, bets placed, session start and end times, features used, error logs, and clickstream data.
• Geolocation data: Country and region-level location derived from your IP address. tk6537 does not collect precise GPS-level geolocation data.
• Cookie and tracking data: Session cookies, preference cookies, and analytical tracking identifiers as described in Section 4 of this policy.

1.3 Information from Third Parties

tk6537 may receive information about you from third-party partners in connection with the operation of our platform:

• Payment processors: Transaction status, reference numbers, and fraud signals from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard processing partners.
• Identity verification providers: Confirmation of document authenticity and identity match results from our KYC technology partners.
• Fraud and risk management services: Risk scores, device fingerprint data, and flagged behaviour patterns from our security service providers.
• Game providers: Round-level game data from Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming, and other licensed studios — used for dispute resolution and account history records.

3.1 Service Providers

tk6537 engages a limited number of carefully vetted third-party service providers to assist in delivering the platform. These providers process personal data on our behalf under binding data processing agreements and are not permitted to use your data for any purpose other than delivering the contracted service. Service provider categories include:

• Payment processing partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard network processors — to facilitate deposits and withdrawals.
• KYC and identity verification providers: To verify the authenticity of identity documents submitted during account verification.
• Cloud hosting and infrastructure providers: To host platform data on secure, geographically redundant servers.
• Customer support technology providers: To operate live chat, ticketing, and email support systems.
• Fraud detection and cybersecurity providers: To monitor for suspicious activity, account takeover attempts, and bot traffic.
• Analytics platforms: To collect anonymised, aggregated usage data for platform performance analysis. No personally identifiable data is shared with analytics providers in identifiable form.

3.2 Game Providers

Games hosted on the tk6537 platform are delivered by licensed third-party studios including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. To facilitate gameplay, a session token and anonymised player reference are transmitted to the game provider's servers for each gaming session. tk6537 does not transmit your full name, email address, payment details, or identity documents to any game provider. Game round data — including bet amounts, outcomes, and timestamps — is transmitted back to tk6537 for the purpose of your account transaction history, dispute resolution, and regulatory record-keeping.

3.3 Legal and Regulatory Disclosures

tk6537 may disclose personal data to regulators, licensing authorities, law enforcement agencies, or courts where we are required to do so by applicable law, valid legal process, or our licensing obligations. In such cases, tk6537 will disclose only the minimum data necessary to satisfy the legal requirement and will, where permitted by law, notify the affected player of the disclosure request.

3.4 Business Transfers

In the event that tk6537 undergoes a merger, acquisition, restructuring, or sale of assets, personal data held on the platform may be transferred to the acquiring entity as part of that transaction. In such circumstances, tk6537 will notify registered players of the change in data controller via the registered email address before any transfer takes effect and will ensure that the acquiring entity commits to data protection standards no less protective than those described in this policy.

3.5 International Data Transfers

As an internationally licensed platform, tk6537's data infrastructure involves servers and service providers located outside Bangladesh. Where personal data is transferred internationally, tk6537 ensures that appropriate safeguards are in place — including contractual data protection clauses and, where applicable, transfers to jurisdictions with recognised adequate data protection standards. By creating an account and using the tk6537 platform, you acknowledge that your personal data may be processed in jurisdictions outside Bangladesh.

5.1 Active Account Data

For as long as your tk6537 account remains open and active, we retain all account registration data, KYC documents, transaction history, gaming history, and communications. This data is necessary to provide the services you have contracted for, to comply with our licensing obligations, and to resolve any disputes that may arise during your account lifetime.

5.2 Post-Closure Retention

Following the closure of your tk6537 account — whether voluntarily, through self-exclusion, or by tk6537's decision — your personal data is retained for the periods set out below before secure deletion:

• Account registration data and KYC documents: 5 years from account closure date, in accordance with standard international anti-money-laundering record-keeping requirements.
• Transaction records (deposits, withdrawals, bets): 5 years from the date of each transaction.
• Customer support communications: 3 years from the date of each interaction.
• Self-exclusion records: Retained for the full duration of the exclusion period plus 5 years, to prevent the re-registration of excluded players.
• Analytical and usage data: Anonymised within 13 months of collection; the anonymised data may be retained indefinitely for statistical purposes.
• Fraud and security investigation records: Up to 7 years from the date of the investigation, where required to support potential legal proceedings.

5.3 Data Minimisation

tk6537 applies the principle of data minimisation throughout the account lifecycle. We collect only the personal data that is genuinely necessary for the stated purpose. We conduct periodic internal reviews to ensure that data held beyond its primary purpose is securely deleted or anonymised promptly. Players may request an account data summary at any time to review what personal data is currently held on their account by contacting [email protected].

tk6537 implements a multi-layered information security programme designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures are reviewed and updated regularly to address emerging threats and to maintain alignment with industry best practices.

7.1 Technical Safeguards

• Encryption in transit: All data transmitted between your device and our platform is encrypted using TLS 1.2 or higher, enforced for all connections without exception.
• Encryption at rest: Sensitive personal data — including identity documents, payment references, and account credentials — is encrypted at rest using AES-256 encryption on all storage systems.
• Password hashing: Account passwords are hashed using a strong, salted hashing algorithm. tk6537 never stores passwords in plain text and no tk6537 employee can read or retrieve your password.
• Two-factor authentication (2FA): Players are strongly encouraged to enable 2FA on their tk6537 account. 2FA adds a second layer of verification to the login process, significantly reducing the risk of unauthorised access even in the event that your password is compromised.
• Web application firewall (WAF): A WAF monitors and filters all incoming platform traffic to block known attack patterns, SQL injection attempts, cross-site scripting, and other common web vulnerabilities.
• Intrusion detection and monitoring: Our security team monitors platform infrastructure 24/7 using automated intrusion detection systems. Anomalous access patterns trigger immediate alerts and investigation protocols.

7.2 Organisational Safeguards

• Access to personal data is restricted on a strict need-to-know basis. Only personnel whose role requires access to personal data are granted access, and all such access is logged and audited.
• All tk6537 staff and contractors with access to personal data are bound by confidentiality obligations and receive regular data protection training.
• Third-party service providers are subject to data protection due diligence before engagement and are contractually required to maintain security standards equivalent to those of tk6537.
• Regular penetration testing and vulnerability assessments are conducted by independent security specialists.

7.3 Data Breach Response

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, tk6537 will notify the affected players via their registered email address without undue delay and in any case within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures being taken to address the breach and mitigate its effects. If you suspect that your tk6537 account has been compromised, please contact [email protected] immediately.

7.4 Your Role in Account Security

While tk6537 takes extensive measures to protect your data, account security also depends on you. We strongly recommend that you use a unique, strong password for your tk6537 account that is not reused on any other platform; enable two-factor authentication; never share your login credentials with any other person; log out of your account on shared or public devices; and contact [email protected] immediately if you notice any suspicious activity on your account.