tk365 Privacy
Policy
At tk365, protecting the personal data of our players across Bangladesh is a core responsibility. This Privacy Policy explains exactly what information we collect, how we use it, who we share it with, and the rights you hold over your own data.
Your Privacy at a Glance
Before reading the full policy, here are the six most important things to know about how tk365 handles your personal data as a player in Bangladesh.
tk365 collects personal information you provide directly — such as your name, date of birth, contact details, and payment method identifiers — as well as technical data generated automatically when you use the Platform, including device type, IP address, and session activity logs.
Your data is used to operate your Account, verify your identity, process deposits and withdrawals via bKash, Nagad, and Rocket, deliver customer support, and send you promotional communications where you have consented. We do not use your data for purposes unrelated to the tk365 Platform.
tk365 does not sell personal data to third parties. Data is shared only with identity verification partners, licensed payment processors, fraud prevention services, and game providers where operationally necessary. All third-party data processors are bound by strict confidentiality agreements.
You have the right to access, correct, and request deletion of your personal data. You may also object to certain types of processing, request data portability, and withdraw consent for marketing communications at any time. All data rights requests are handled within 30 days of receipt.
tk365 uses cookies and similar tracking technologies to maintain your login session, remember your preferences, analyse Platform performance, and detect fraudulent access attempts. You can manage non-essential cookie preferences through your browser settings. Essential cookies cannot be disabled as they are required for the Platform to function.
tk365 protects your personal data using industry-standard security measures including 256-bit SSL/TLS encryption for all data in transit, encrypted storage for sensitive account data at rest, multi-factor authentication options, and continuous monitoring for unauthorised access attempts on our infrastructure.
1. Introduction
tk365 ("we", "us", "our", "tk365") is committed to protecting the privacy and personal data of all individuals who access and use the tk365 Platform ("Platform"), including players located in Bangladesh and other permitted jurisdictions. This Privacy Policy ("Policy") describes in detail how we collect, use, store, share, and protect your personal information in connection with your use of the tk365 website, mobile platform, and all associated services.
This Policy forms part of the tk365 Terms and Conditions. By registering an Account on the tk365 Platform or by continuing to use the Platform, you confirm that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should discontinue use of the Platform and contact support to close your Account.
We encourage you to read this Policy in full. If you have questions about any section, contact our support team at [email protected] — we are available 24 hours a day, 7 days a week (BST, UTC+6).
2. Data Controller
For the purposes of this Privacy Policy, tk365 is the data controller responsible for your personal data. As data controller, we determine the purposes and means by which your personal data is processed in connection with your use of the Platform.
Where tk365 engages third-party service providers to process data on our behalf — such as identity verification partners, payment processors, or fraud detection services — those providers act as data processors under written agreements that restrict their use of your data to the specific purposes for which they have been engaged. tk365 remains responsible for ensuring that all data processors handle your information in a manner consistent with this Policy.
All data rights requests, privacy inquiries, and complaints relating to the processing of your personal data should be directed to the tk365 Data Protection contact as set out in Section 18 of this Policy.
3. Personal Data We Collect
tk365 collects the following categories of personal data in connection with your use of the Platform:
3.1 Identity Data
- Full legal name as it appears on your government-issued identity document.
- Date of birth (used to verify that you are 21 years of age or older).
- National Identity Card (NID) number, passport number, or driver's licence number.
- Scanned copies or photographs of identity documents submitted during KYC verification.
3.2 Contact Data
- Email address.
- Mobile phone number (including WhatsApp-enabled numbers).
- Residential address, including division, district, and postal code within Bangladesh.
3.3 Account Data
- Username and encrypted password hash.
- Account registration date and account status.
- Preferred currency (BDT or INR).
- Responsible gaming preferences including deposit limits and self-exclusion status.
3.4 Financial Data
- bKash, Nagad, Rocket, or Upay mobile wallet identifiers used to make deposits or receive withdrawals.
- Transaction history including deposit amounts, withdrawal amounts, dates, and reference numbers.
- Bonus and promotional credit history.
3.5 Technical & Usage Data
- IP address and approximate geolocation derived from IP.
- Device type, operating system, and browser type and version.
- Session start and end times, pages visited, features accessed, and clickstream data.
- Betting and gaming activity, including markets wagered on, stakes placed, game sessions, and outcomes.
3.6 Communications Data
- Contents of support chat transcripts, emails, and WhatsApp messages exchanged with tk365 support staff.
- Survey responses and feedback submissions.
- Records of your consent to receive marketing communications.
4. How We Collect Your Data
tk365 collects personal data through the following methods:
- Direct Submission: Information you provide when registering an Account, completing the KYC process, making a deposit or withdrawal, contacting support, or participating in a promotion.
- Automated Collection: Technical and usage data collected automatically when you access the Platform, including data gathered via cookies, server logs, and analytics tools.
- Third-Party Sources: Identity and address verification data received from KYC partners used to confirm the accuracy of the information you have provided. Fraud risk signals received from payment processors and fraud detection services. Publicly available data where relevant to account security investigations.
- Payment Provider Data: Transaction confirmation data received from bKash, Nagad, Rocket, and Upay when you initiate a deposit or withdrawal on the Platform.
5. Legal Basis for Processing
tk365 processes your personal data on the following legal bases:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract (Terms and Conditions) |
| Identity verification (KYC) | Legal obligation / contractual necessity |
| Processing deposits and withdrawals | Performance of a contract |
| Fraud prevention and security monitoring | Legitimate interests of tk365 and protection of players |
| Customer support and dispute resolution | Performance of a contract / legitimate interests |
| Marketing and promotional communications | Consent (you may withdraw at any time) |
| Responsible gaming monitoring | Legal obligation / legitimate interests (player protection) |
| Platform analytics and performance improvement | Legitimate interests of tk365 |
| Compliance with applicable law | Legal obligation |
Where tk365 relies on legitimate interests as the legal basis for processing, we have assessed that our interests are not overridden by your fundamental rights and freedoms, taking into account the reasonable expectations of players using a digital betting platform.
6. How We Use Your Personal Data
tk365 uses the personal data we collect for the following specific purposes:
- Account Administration: Creating and managing your tk365 Account, processing login authentication, maintaining account preferences, and communicating account status updates to you.
- Identity Verification: Verifying that you meet the minimum age requirement (21 years), confirming that the information provided during registration is accurate, and fulfilling Know Your Customer obligations in connection with financial transactions on the Platform.
- Payment Processing: Facilitating deposit transactions from your bKash, Nagad, Rocket, or Upay wallet to your tk365 Account Balance, and processing withdrawal requests from your Account to your registered payment method.
- Fraud Prevention & Security: Detecting and preventing fraudulent account activity, multi-accounting, bonus abuse, money laundering, and unauthorised access attempts. Monitoring betting patterns for indicators of prohibited conduct as defined in the tk365 Terms and Conditions.
- Customer Support: Responding to your queries, resolving disputes, processing responsible gaming requests, and communicating operational updates relevant to your Account.
- Responsible Gaming: Monitoring your gaming activity to identify potential indicators of problem gambling behaviour, enforcing deposit limits and self-exclusion restrictions you have set, and proactively reaching out to players who may benefit from responsible gaming support.
- Marketing Communications: Sending you information about tk365 promotions, bonuses, seasonal offers tied to BPL, IPL, Eid, Pohela Boishakh, and other relevant events — where you have given us consent to do so. You may unsubscribe from marketing communications at any time by contacting support or using the unsubscribe link in any marketing email.
- Platform Improvement: Analysing aggregated and anonymised usage data to understand how players interact with the Platform and to improve the user experience, game selection, and payment processes.
- Legal Compliance: Retaining records as required by applicable anti-money laundering regulations, responding to lawful requests from regulatory or law enforcement authorities, and enforcing our Terms and Conditions.
7. Data Sharing & Disclosure
tk365 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the following circumstances and only to the extent necessary for the stated purpose:
7.1 Service Providers
tk365 engages third-party service providers who process personal data on our behalf under written data processing agreements. These include:
- KYC and identity verification providers who verify identity documents submitted during account registration.
- Payment processors including the technology partners supporting bKash, Nagad, Rocket, and Upay integrations on the Platform.
- Fraud detection and risk management services that analyse transaction and behavioural data to identify suspicious activity.
- Cloud hosting and infrastructure providers who store Platform data in secure, access-controlled environments.
- Customer support platform providers that facilitate live chat and ticketing systems used by tk365 support staff.
7.2 Game Providers
When you play casino games or live dealer titles provided by third-party studios such as Evolution Gaming, Pragmatic Play, Spribe, NetEnt, Microgaming, or Ezugi, limited technical data (such as a player session token or anonymised player identifier) may be transmitted to those studios to facilitate game play. Game providers do not receive your full personal profile and are contractually prohibited from using any such data for their own independent marketing or profiling purposes.
7.3 Legal & Regulatory Disclosure
tk365 may disclose personal data to law enforcement agencies, regulatory bodies, or other authorised authorities where required to do so by applicable law, court order, or formal legal process. In such cases, tk365 will disclose only the minimum data necessary to comply with the legal obligation and will, where legally permissible, notify you of such disclosure.
7.4 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of the tk365 business, personal data held by tk365 may be transferred to the acquiring entity as part of that transaction. In such circumstances, the acquiring entity will be required to honour the commitments made in this Privacy Policy or notify you of any material changes before they take effect.
8. Payment Data & Financial Privacy
tk365 takes particular care in handling financial data given its sensitivity. The following standards apply to all payment-related data processed on the Platform:
- tk365 does not store complete bKash, Nagad, or Rocket wallet credentials on its own servers. Payment transactions are processed via secure API integrations with the respective payment providers, and only transaction reference numbers and confirmation statuses are retained by tk365.
- Deposit and withdrawal transaction records are retained for a minimum of 5 years as required by applicable financial record-keeping standards.
- tk365 applies transaction monitoring to all financial activity on the Platform as part of its anti-money laundering obligations. Unusual or suspicious transaction patterns may be flagged for manual review by the tk365 compliance team.
- All financial data in transit between your device and tk365's servers is encrypted using 256-bit TLS encryption. Financial data stored on tk365 servers is encrypted at rest using industry-standard encryption protocols.
- Players whose financial data is involved in a fraud investigation may have their withdrawal access temporarily restricted while the investigation is ongoing. tk365 will notify affected players as soon as it is legally permissible to do so.
9. Cookies & Tracking Technologies
tk365 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device when you visit a website. tk365 uses the following categories of cookies:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential Cookies | Maintain your login session, remember your currency preference, enable core Platform functionality including game loading and transaction processing. | No — required for the Platform to function. |
| Security Cookies | Detect fraudulent login attempts, identify unusual device behaviour, support multi-factor authentication flows. | No — required for account security. |
| Analytics Cookies | Collect anonymised data on Platform usage patterns, page performance, and feature engagement to help us improve the Platform experience. | Yes — via browser settings. |
| Preference Cookies | Remember your game lobby layout preferences, notification settings, and responsible gaming display options. | Yes — via browser settings. |
You can manage or delete cookies through your browser settings at any time. Note that disabling non-essential cookies will not affect your ability to use the core features of the tk365 Platform. Instructions for managing cookies in common browsers are available in your browser's help documentation.
tk365 does not use third-party advertising or retargeting cookies. We do not place tracking pixels on behalf of external advertisers.
10. Data Retention
tk365 retains personal data for as long as is necessary to fulfil the purposes set out in this Policy, subject to any longer retention periods required by applicable law. The following retention periods apply:
- Active Account Data: Retained for the duration of your Account's active status on the Platform, plus a post-closure retention period of 5 years for compliance and legal purposes.
- Identity Verification Documents: Retained for a minimum of 5 years from the date of submission, in accordance with applicable anti-money laundering record-keeping requirements.
- Financial Transaction Records: Retained for a minimum of 5 years from the transaction date.
- Support Communications: Retained for 2 years from the date of the most recent communication in a support thread, unless the communication relates to a formal dispute in which case it is retained for 5 years.
- Marketing Consent Records: Retained for the duration of your consent and for 3 years following withdrawal of consent, to evidence the history of your marketing preferences.
- Technical & Usage Logs: Aggregated analytics data is anonymised after 12 months. Raw session logs containing identifiable data are deleted after 90 days.
When personal data is no longer required for its original purpose and no legal retention obligation applies, tk365 will securely delete or anonymise it in accordance with our internal data lifecycle management procedures.
11. Data Security
tk365 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include:
- Encryption: All data transmitted between your device and tk365's servers is protected by 256-bit TLS encryption. Sensitive data stored on our servers — including identity documents and financial records — is encrypted at rest.
- Access Controls: Access to personal data is restricted to tk365 staff and contractors who have a legitimate operational need to access it. Access permissions are reviewed quarterly and revoked promptly upon staff departure.
- Secure Infrastructure: tk365's Platform is hosted on enterprise-grade cloud infrastructure with physical security controls, intrusion detection systems, and 24-hour monitoring. Infrastructure access is protected by multi-factor authentication.
- Security Testing: tk365 conducts regular vulnerability assessments and penetration testing to identify and remediate potential security weaknesses in the Platform.
- Incident Response: tk365 maintains a documented data breach response plan. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, tk365 will notify affected players without undue delay.
12. International Data Transfers
The tk365 Platform serves players primarily in Bangladesh. However, some of the service providers we use — including cloud hosting providers, KYC verification partners, and game technology providers — may process data in data centres located outside Bangladesh. Where such transfers occur, tk365 ensures that appropriate safeguards are in place to protect your data, including:
- Contractual data processing agreements that impose obligations on data processors equivalent to those required under applicable data protection principles.
- Use of service providers with internationally recognised security certifications (such as ISO 27001 or SOC 2 Type II).
- Data minimisation practices ensuring that only the minimum necessary data is transferred internationally for each processing purpose.
tk365 does not transfer personal data to jurisdictions that do not offer an adequate level of data protection without implementing appropriate contractual safeguards.
13 . Your Data Rights
As a player on the tk365 Platform, you have the following rights in relation to your personal data. Requests to exercise any of these rights should be submitted in writing to [email protected] with the subject line "Data Rights Request". tk365 will respond within 30 days of receiving a valid request.
You have the right to request a copy of the personal data tk365 holds about you, along with information about how it is being used and with whom it has been shared.
You have the right to request that inaccurate or incomplete personal data held by tk365 be corrected or updated without undue delay.
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
You may ask tk365 to restrict the processing of your personal data in certain circumstances, for example while a complaint or accuracy dispute is being investigated.
You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format where processing is based on your consent or a contract.
You may object to processing carried out on the basis of legitimate interests, including profiling, where you believe your rights and freedoms override those interests.
14. Children's Privacy & Age Verification
The tk365 Platform is strictly intended for adults aged 21 years and above. tk365 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the Account registration process; all players are required to submit a valid government-issued identity document confirming they are 21 or older before their Account is approved for full access.
If tk365 becomes aware that personal data has been collected from a person under the age of 21 — whether through a failed age verification check, a third-party report, or any other means — the following actions will be taken immediately:
- The relevant Account will be suspended and access to the Platform revoked.
- Any Account Balance held in the underage Account will be reviewed in accordance with tk365's underage gambling policy.
- All personal data associated with the underage Account will be deleted from tk365's systems as quickly as operationally possible, except where retention is required for compliance or investigative purposes.
If you are a parent or guardian and have reason to believe that a person under 21 has registered an Account on tk365, please contact us immediately at [email protected] so we can take prompt action. 21+ only. Please play responsibly.
15. Marketing Communications
tk365 may send you promotional communications about bonuses, seasonal offers, new game launches, and Platform updates by email, SMS, or WhatsApp — but only where you have given explicit consent to receive such communications during Account registration or at a later point through your Account settings.
Our marketing communications may reference events and promotions relevant to the Bangladesh market, including BPL cricket season offers, Eid bonus promotions, Independence Day specials (March 26), Victory Day promotions (December 16), and Pohela Boishakh seasonal offers.
You have the right to withdraw your consent to marketing communications at any time, without affecting the lawfulness of any marketing processing carried out before your withdrawal. You may unsubscribe by:
- Clicking the unsubscribe link included in any marketing email from tk365.
- Sending a message to [email protected] with the subject line "Unsubscribe" from your registered email address.
- Contacting tk365 support via WhatsApp or live chat and requesting removal from all marketing lists.
Withdrawal of marketing consent will be processed within 5 business days. Transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — are not marketing communications and will continue to be sent regardless of your marketing preferences, as they are necessary for the operation of your Account.
16. Third-Party Links & Integrations
The tk365 Platform may contain references to, or integrations with, third-party services such as payment providers (bKash, Nagad, Rocket, Upay) and game studios (Evolution Gaming, Pragmatic Play, Spribe, NetEnt, Microgaming, Ezugi). When you interact with these third-party services — for example, by initiating a bKash deposit through the bKash payment interface — you are interacting with a service operated independently by that third party, and their own privacy policies and terms of service apply.
tk365 is not responsible for the privacy practices of any third-party service provider. We encourage you to review the privacy policies of any third-party service you use in connection with your tk365 Account. This Policy applies only to data collected and processed directly by tk365 in connection with the Platform.
17. Changes to This Privacy Policy
tk365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance, or Platform functionality. The most current version of this Policy will always be available on the tk365 Platform at the /privacy-policy URL.
Where a proposed change to this Policy is material — meaning it significantly affects how we use your personal data or the rights available to you — tk365 will notify you in advance by email to your registered address and/or by displaying a prominent notice on the Platform. You will have a reasonable opportunity to review the changes before they take effect.
Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material change to this Policy, you should stop using the Platform and contact support at [email protected] to close your Account before the change takes effect.
18. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how tk365 handles your personal data, please contact us using the details below. All privacy-related communications are handled by our dedicated data protection team.
- Email: [email protected]
- WhatsApp: +880 1700 000365
- Subject Line for Data Requests: "Data Rights Request" or "Privacy Inquiry"
- Response Time: Within 30 days for data rights requests; within 2 business days for general privacy questions.
- Support Hours: 24 hours a day, 7 days a week (BST, UTC+6)
Your Data Is Safe With Us
Now that you have reviewed our Privacy Policy, you can explore the tk365 Platform with confidence. SSL-encrypted deposits via bKash and Nagad, fair play certified games, and 24/7 support — all for players across Bangladesh. 21+ only.