tk299 Privacy Policy — How We Protect Your Personal Data

1 Introduction

tk299 is committed to protecting the privacy and personal data of every player who uses our online casino and sports betting platform. This Policy is intended to give you a clear, honest, and complete account of our data practices so you can make informed decisions about your personal information.

This Policy applies to all personal data collected through the tk299 website (tk299.io), our mobile-optimised site, customer support channels, and any related services we provide to players based in Bangladesh and other jurisdictions where our platform is accessible.

We may update this Policy from time to time to reflect changes in our data practices, technology, or applicable legal obligations. The date of the most recent revision is always displayed at the top of this Policy. Continued use of the Platform following any update constitutes your acceptance of the revised Policy.

For any questions or concerns about your personal data or this Policy, please contact our dedicated data support team at [email protected]. All correspondence regarding data matters should be sent from the email address registered to your tk299 account so we can verify your identity efficiently.

2 Personal Data We Collect

tk299 collects personal data across several categories. Below is a comprehensive overview of the types of data we may hold about you:

2.1 Identity & Contact Data

• Full legal name (first name and surname)
• Date of birth (used for mandatory 21+ age verification)
• Residential address (street, city, district, postal code)
• Mobile phone number registered in Bangladesh or otherwise
• Email address used during registration
• National ID card number, passport number, or driving licence number (provided during KYC)

2.2 Financial & Transaction Data

• bKash, Nagad, Rocket, or Upay mobile wallet account numbers (last four digits stored only)
• Bank account or card details necessary for processing withdrawals (partial data only; full card numbers are never stored)
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method references
• Betting and gaming history: wagers placed, games played, winnings, and losses

2.3 Technical & Usage Data

• IP address at the time of registration and at each subsequent login
• Device type, operating system, and browser version
• Session duration, pages visited, and features accessed within the Platform
• Referring URL (the website or link from which you arrived at tk299.io)
• Geolocation data at a country and city level (derived from IP; precise GPS location is not collected)

2.4 Communication Data

• Records of all communications between you and our customer support team, including live chat transcripts, email correspondence, and support ticket histories
• Survey responses, feedback submissions, and any voluntary information you provide to us through support channels

2.5 Identity Verification Documents

As part of our Know Your Customer (KYC) process, we may collect copies of government-issued identification documents and supporting proof of address. These documents are processed securely and retained only for as long as required by applicable legal obligations.

3 How We Collect Your Data

tk299 collects your personal data through the following channels and mechanisms:

3.1 Direct Collection

You provide data directly to us when you: register an account on tk299.io; complete identity verification (KYC); make a deposit or request a withdrawal; contact our customer support team; respond to a survey or promotional offer; or update your account profile settings.

3.2 Automated Collection

When you access the Platform, our servers and analytics systems automatically record technical data including your IP address, device identifiers, session timestamps, and browsing behaviour within the Platform. This data is collected using server logs, cookies, pixel tags, and similar tracking technologies. See Section 7 for full details on our use of cookies.

3.3 Third-Party Sources

We may receive supplementary data about you from the following trusted third-party sources in order to verify your identity, prevent fraud, and comply with anti-money laundering obligations:

• KYC and identity verification service providers who cross-reference the documents you submit against official databases
• Payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard) who confirm transaction outcomes
• Fraud detection and risk scoring services that assess account behaviour patterns

In all cases, third-party data sources are vetted by tk299 to ensure they operate under appropriate data protection standards before any data exchange occurs.

4 How We Use Your Personal Data

tk299 uses the personal data it collects for the following specific and legitimate purposes:

tk299 does not use your personal data for any purpose not listed above. If we intend to use your data for a materially new purpose, we will notify you in advance and, where required, seek your explicit consent before proceeding.

5 Legal Basis for Processing

tk299 processes your personal data under one or more of the following legal bases:

• Contract Performance: Processing is necessary to fulfil our contractual obligations to you as a registered player — including account management, payment processing, and customer support.
• Legal Obligation: Processing is required to comply with applicable legal duties, including age verification (21+ requirement), anti-money laundering (AML) checks, and fraud reporting obligations.
• Legitimate Interests: Processing is necessary for tk299's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and product improvement — provided those interests are not overridden by your rights.
• Consent: For optional processing such as marketing communications, we will rely on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Disclosure

tk299 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may, however, share your data with the following categories of trusted recipients under strict data processing agreements:

6.1 Service Providers

We share personal data with carefully selected third-party service providers who assist us in operating the Platform. These include KYC and identity verification partners, payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), cloud hosting providers, IT security firms, and customer support platform vendors. All service providers are contractually prohibited from using your data for any purpose other than providing the services we have engaged them for.

6.2 Game Content Providers

Certain games on the tk299 platform are supplied by third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited technical data (such as a pseudonymous player session identifier) to facilitate game delivery and maintain fair-play certification. They do not receive your name, payment details, or contact information.

6.3 Legal & Regulatory Disclosure

tk299 may disclose your personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where we are legally required to do so — for example, in response to a lawful court order, to assist with an investigation into fraud or money laundering, or to enforce our Terms & Conditions.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of tk299's assets, your personal data may be transferred to the acquiring entity. We will notify you of any such transfer and ensure that your data continues to be processed in accordance with this Policy.

7 Cookies & Tracking Technologies

tk299 uses cookies and similar tracking technologies to improve your experience on the Platform, maintain your session, analyse usage patterns, and prevent fraud. The following types of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They manage your login session, remember your preferences during a visit, and maintain the security of your account. You cannot opt out of these cookies while using the Platform.
• Analytics Cookies: These cookies collect anonymised data about how users interact with the Platform — which pages are visited most frequently, how long sessions last, and where users navigate after landing. This data helps us improve the Platform's usability and content.
• Functional Cookies: These cookies remember your choices and settings (such as your preferred language or display settings) to personalise your experience across sessions.
• Security Cookies: These cookies support our fraud detection systems by identifying unusual patterns of behaviour that may indicate unauthorised account access or automated bot activity.

Most web browsers allow you to control cookie settings through your browser preferences. Please note that disabling certain cookies may impair the functionality of the Platform. For detailed guidance on managing cookies in your specific browser, refer to your browser's official documentation.

8 Data Security

tk299 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encrypted storage of sensitive data at rest using industry-standard encryption algorithms
• Strict access controls ensuring that only authorised tk299 personnel can access personal data, on a need-to-know basis
• Two-factor authentication (2FA) options available for player accounts to add an additional layer of login security
• Regular third-party security audits and penetration testing of our Platform infrastructure
• Continuous monitoring of our systems for anomalous activity, with incident response procedures in place

While tk299 takes every reasonable precaution to secure your data, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights, tk299 will notify affected players promptly and take immediate steps to contain and remediate the incident.

You also play an important role in keeping your account secure. Never share your password or OTP with anyone — including people claiming to be tk299 staff. tk299 will never ask for your password via email, live chat, or any other communication channel.

9 Data Retention

tk299 retains your personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any overriding legal requirements that mandate longer retention periods. The following general retention guidelines apply:

• Account Data: Retained for the duration of your active account relationship with tk299, plus a post-closure retention period as required by applicable financial regulations.
• KYC & Identity Verification Documents: Retained for the period mandated by anti-money laundering regulations, typically five (5) years from the date of account closure or last transaction.
• Transaction Records: Retained for a minimum of five (5) years in accordance with financial record-keeping obligations.
• Customer Support Communications: Retained for three (3) years from the date of the last communication, or longer if the record is relevant to an ongoing dispute.
• Marketing Consent Records: Retained for as long as you hold an active account, or until you withdraw your consent, whichever is sooner.
• Technical & Usage Logs: Retained for up to twelve (12) months on a rolling basis, unless flagged for security review purposes.

Once the applicable retention period expires, personal data is securely deleted from our systems or irreversibly anonymised so that it can no longer be associated with an identifiable individual.

10 Your Data Rights

As a tk299 player, you hold the following rights over your personal data. To exercise any of these rights, please contact our support team at [email protected] from your registered email address:

• Right of Access: You have the right to request a copy of all personal data tk299 holds about you, along with information about how it is being used.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure: In certain circumstances, you have the right to request that we delete your personal data — for example, if the data is no longer necessary for the purpose for which it was collected and no overriding legal obligation requires its retention.
• Right to Restriction: You have the right to request that we restrict the processing of your data while a complaint or correction request is being resolved.
• Right to Data Portability: Where processing is based on your consent or a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling. You also have an unconditional right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.

tk299 will respond to all verified data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further two months, in which case we will notify you of the extension and the reasons for it.

11 Children & Minors

tk299 employs rigorous age verification procedures as part of the account registration and KYC process. Any account found to be registered by a person under the age of 21 will be closed, any funds deposited will be returned to the source payment method, and any winnings accrued will be voided in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that your child has registered an account with tk299 without your knowledge, please contact our support team at [email protected] immediately so we can take prompt action.

12 Third-Party Links & Services

The tk299 Platform may display content or references related to third-party game providers and payment partners. While we take care to work only with reputable partners, tk299 is not responsible for the privacy practices or the content of any third-party website or service that is not directly operated by us.

tk299 does not embed external advertising, third-party trackers, or third-party social media widgets on the Platform that would allow external parties to collect your data without your knowledge. All third-party integrations on our Platform are operational in nature (game delivery, payment processing, fraud prevention) and are governed by data processing agreements that restrict secondary use of your data.

13 Updates to This Privacy Policy

tk299 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the features and services offered on the Platform. Any changes will be published on this page with an updated effective date.

Where changes are material — meaning they significantly affect how we collect or use your personal data — tk299 will notify registered players via the email address on their account at least seven (7) days before the changes take effect. For minor or clarificatory changes, the updated Policy will take effect upon publication without individual notification.

It is your responsibility to review this Policy periodically. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must stop using the Platform and may request account closure by contacting our support team.

14 Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about how tk299 handles your personal data, please reach out to our support team. We take all privacy enquiries seriously and will do our best to resolve your concern promptly and transparently.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter through the formal dispute resolution process described in our Terms & Conditions. tk299 is committed to resolving all privacy disputes fairly and within a reasonable timeframe.