tk1997 Privacy Policy

This Privacy Policy ("Policy") is issued by tk1997 ("the Company", "we", "us", "our") and governs the collection, use, storage, transfer, and deletion of personal data relating to users of the tk1997 online gaming platform, accessible at https://tk1997.ws and any associated mobile applications (collectively, "the Platform").

By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

We may update this Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. Where changes are material, we will notify you by posting a notice on the Platform or by emailing your registered address. Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference.

tk1997 collects personal data through several channels: directly from you during registration and account use, automatically through technical systems when you access the Platform, and from third-party partners where permitted by law. The categories of data we collect are outlined below.

2.1 Data You Provide Directly

• Identity data: Full legal name, date of birth, gender, and copies of government-issued identification documents (national ID card, passport, or driving licence) submitted for account verification purposes.
• Contact data: Email address, mobile phone number, and residential address including city (for example, Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi) and postal code.
• Financial data: Payment method identifiers such as bKash wallet numbers, Nagad account references, Rocket mobile banking numbers, Upay account details, bank account numbers, or card details (partial, as required for transaction processing). Full card numbers and PINs are never stored by tk1997.
• Account credentials: Username and a hashed (never plain-text) version of your password.
• Communications data: Records of your correspondence with our customer support team, including live chat transcripts, emails, and any supporting documents you attach.

2.2 Data Collected Automatically

• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, games played, bets placed and settled, session start and end times (recorded in Bangladesh Standard Time, UTC+6), clickstream data, and feature interaction logs.
• Cookie and tracking data: First-party cookies and similar technologies used to maintain your session, remember your preferences, and analyse aggregate traffic patterns. See Section 8 for full details on our cookie practices.

2.3 Data Received from Third Parties

• Identity verification results from our know-your-customer (KYC) service providers.
• Transaction confirmation signals from payment processors including bKash, Nagad, Rocket, Upay, and partnered banks.
• Fraud and risk signals from third-party anti-fraud platforms used to protect the integrity of our Platform.

tk1997 processes your personal data only where a valid legal basis exists. The primary legal bases we rely upon are as follows:

• Contractual necessity: Processing that is necessary to perform the contract between you and tk1997, including creating your account, accepting deposits, settling bets, and processing withdrawals.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, age and identity verification requirements, and financial record-keeping duties.
• Legitimate interests: Processing necessary for tk1997's legitimate business interests, including fraud prevention, platform security, abuse detection, and improving the quality of our services — provided those interests are not overridden by your own privacy rights.
• Consent: Where we rely on consent (for example, for optional marketing communications), you have the right to withdraw that consent at any time by contacting [email protected] or updating your account notification preferences.

tk1997 uses your personal data strictly for the purposes described in this Policy. We do not use your data for purposes that are incompatible with those stated here without first obtaining your consent or establishing a separate legal basis. Specific uses include:

• Account management: Creating and maintaining your tk1997 account, processing login authentication, and managing account preferences.
• Payment processing: Executing deposit and withdrawal transactions in BDT via bKash, Nagad, Rocket, Upay, and partnered banking institutions. Verifying that payment instruments belong to the account holder.
• Regulatory compliance: Conducting KYC and AML checks as required. Retaining transaction records for audit and regulatory review. Reporting suspicious activity where legally required.
• Responsible gaming: Monitoring account activity to identify indicators of problem gambling. Enforcing self-exclusion requests and deposit limit settings. Referring at-risk players to support resources.
• Customer support: Responding to enquiries, resolving disputes, and maintaining records of support interactions.
• Fraud prevention and security: Detecting and preventing fraudulent activity, unauthorised account access, bonus abuse, and other forms of platform misuse.
• Service communications: Sending transactional messages such as deposit confirmations, withdrawal notifications, password reset links, and security alerts.
• Marketing (with consent): Sending promotional offers, bonus notifications, and news about new games or features where you have opted in to receive such communications. You may opt out at any time.
• Analytics and improvement: Analysing aggregated, anonymised usage data to understand how players interact with the Platform and to improve game selection, navigation, and overall user experience.

tk1997 does not sell or rent your personal data to third parties. We share your data only in the specific circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors: We share the minimum necessary financial identifiers with payment service providers (including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other banking partners) to execute your transactions securely.
• Identity verification providers: We share identity documents and related data with our KYC partners to fulfil our age and identity verification obligations.
• Game software providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session tokens or anonymised player identifiers necessary to operate their games on the Platform. These providers are bound by data processing agreements and may not use your data for their own marketing purposes.
• Fraud and security vendors: We share technical identifiers (IP address, device fingerprint) with anti-fraud service providers to protect the Platform against abuse.
• Legal and regulatory authorities: We may disclose personal data to law enforcement, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or binding legal process.
• Professional advisors: Lawyers, auditors, and accountants may access limited personal data in the course of providing professional services to tk1997, under strict confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of tk1997's business, personal data may be transferred to the relevant successor entity. Affected users will be notified in advance where legally required.

All third-party data processors are required to implement appropriate technical and organisational security measures and to process personal data only on tk1997's documented instructions.

tk1997 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active account data: Retained for the full duration of the account relationship and for a period of five years following account closure, to satisfy financial record-keeping and AML compliance obligations.
• Transaction records: All deposit, withdrawal, and betting transaction records are retained for a minimum of five years from the date of the transaction.
• KYC and identity documents: Retained for five years from the date of verification or from account closure, whichever is later.
• Customer support records: Retained for three years from the date of the last interaction.
• Marketing preferences and consent records: Retained for the duration of the account plus three years, to provide evidence of consent in the event of a complaint.
• Technical and usage logs: Retained in identifiable form for up to 12 months, then anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual. Where anonymised data is retained for statistical or analytical purposes, it is no longer considered personal data under this Policy.

As a tk1997 player, you have the following rights with respect to your personal data. To exercise any of these rights, please submit a written request to [email protected]. We will respond within 30 days of receiving a valid request. In complex cases, we may extend this period by a further 30 days with prior notice.

• Right of access: You have the right to request a copy of the personal data tk1997 holds about you, along with information about how it is processed.
• Right to rectification: You have the right to request correction of inaccurate personal data or completion of incomplete data held about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to restriction: You may request that we restrict processing of your data in certain circumstances, for example while the accuracy of the data is disputed.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

tk1997 uses first-party cookies and similar local storage technologies to operate the Platform effectively. We do not use third-party advertising cookies or cross-site tracking pixels. The cookies we set serve the following purposes:

• Session cookies: Strictly necessary. These maintain your login session and keep you authenticated as you navigate between pages. They expire when you close your browser.
• Preference cookies: Store your platform settings such as language preference and notification choices. These persist across sessions until you clear them or they expire (typically 12 months).
• Analytics cookies: Collect anonymised data about how players navigate the Platform, which pages are most visited, and where users encounter difficulty. This data is used in aggregate only and cannot be linked to your account.
• Security cookies: Help detect and prevent fraudulent access attempts and CSRF (cross-site request forgery) attacks. These are strictly necessary and cannot be disabled without degrading platform security.

You may manage or delete cookies through your browser settings at any time. Disabling strictly necessary cookies will prevent the Platform from functioning correctly and may result in your inability to log in or complete transactions.

tk1997 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit TLS encryption on all data in transit between your device and our servers.
• Encryption of sensitive data at rest, including identity documents and financial identifiers.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific function.
• Regular penetration testing and vulnerability assessments of our platform infrastructure.
• Continuous monitoring of system logs for anomalous activity indicative of a security incident.
• Secure password hashing using modern cryptographic algorithms. Passwords are never stored in recoverable plain-text form.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, tk1997 will notify you without undue delay and in accordance with applicable legal requirements. Notification will be sent to your registered email address.

You also play an important role in keeping your data secure. Use a strong, unique password for your tk1997 account, do not share your login credentials with anyone, and log out of your account when using shared devices. If you suspect your account has been compromised, contact [email protected] immediately.

The tk1997 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect or process personal data from persons under the age of 21. If we become aware that personal data has been submitted by an individual under the minimum age, we will delete that data promptly and close the associated account.

If you believe that a minor has registered or is using a tk1997 account, please notify us immediately at [email protected] so that we can take appropriate action.

tk1997 reserves the right to amend this Privacy Policy at any time. When we make changes, we will update the "Last reviewed" date at the top of this page and, where the changes are material, we will notify you by posting a prominent notice on the Platform or by sending an email to your registered address at least seven days before the changes take effect.

Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must stop using the Platform and may close your account by contacting our support team.

We encourage you to review this Policy periodically to stay informed about how we protect your data. Archived versions of prior policies are available on request from [email protected].

For any questions, concerns, or requests relating to this Privacy Policy or the personal data tk1997 holds about you, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Response time: We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days.
• Availability: Our support team operates 24 hours a day, 7 days a week, including Bangladeshi public holidays such as Eid, Pohela Boishakh, and Victory Day (16 December).

When submitting a data rights request, please include your registered email address, your account username, and a clear description of the right you wish to exercise. For security purposes, we may ask you to verify your identity before processing any request that involves accessing, modifying, or deleting account data.