tk666 Privacy Policy

tk666 acts as the data controller in respect of personal data collected through the Platform. As data controller, tk666 determines the purposes and means of processing your personal data. All data processing activities carried out by tk666 are governed by this Privacy Policy and applicable data protection principles.

For all privacy-related queries and data subject requests, you may contact us at [email protected]. We aim to respond to all data-related requests within 30 days of receipt.

tk666 collects personal data through the following means:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or participate in promotions.
• Automatically: through cookies, log files, and session tracking technologies when you access or use the Platform.
• From payment processors: transaction confirmation data received from bKash, Nagad, Rocket, Upay, and partner banks when you initiate a deposit or withdrawal.
• From identity verification partners: KYC document authentication data when we carry out mandatory age and identity checks.
• From third-party game providers: gameplay data and session information received from licenced game studios (e.g. Pragmatic Play, Evolution Gaming, Spribe) when you play their games on the Platform.

tk666 processes your personal data only for specified, explicit, and legitimate purposes. The primary purposes for which we use your data are:

• Account registration and management: to create, verify, maintain, and close your player account in accordance with our Terms and Conditions.
• KYC and age verification: to comply with our obligations to verify player age (21+) and identity before processing deposits and withdrawals above applicable thresholds.
• Payment processing: to facilitate BDT deposits and withdrawals via your chosen payment method and to maintain an accurate transaction record.
• Responsible gaming: to operate and enforce deposit limits, time-out periods, self-exclusion requests, and other responsible gaming measures requested by or applied to your account.
• Fraud prevention and security: to detect, investigate, and prevent fraud, money laundering, match-fixing, and other prohibited activities, and to report suspected financial crimes to the relevant authorities.

tk666 relies on the following legal bases for processing your personal data:

• Contractual necessity: processing your identity, financial, and gaming data is necessary to perform the contract between you and tk666 (i.e. to operate your account and process your transactions).
• Legal obligation: KYC verification, anti-money-laundering checks, and responsible gaming enforcement are carried out to comply with applicable legal and regulatory requirements.
• Legitimate interests: device data, session analytics, and fraud-detection processing are carried out on the basis of tk666's legitimate interest in securing the Platform and improving service quality, provided that these interests are not overridden by your fundamental privacy rights.

Where tk666 relies on your consent as a legal basis (e.g. for marketing communications), you may withdraw that consent at any time by contacting [email protected] or updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

tk666 does not sell personal data to third parties. We may share your personal data with carefully selected categories of recipients only where necessary and only to the extent required for the specified purpose. Recipients include:

Payment service providers (bKash, Nagad, Rocket, Upay, partner banks) to process BDT transactions. KYC and identity verification providers to confirm your age and identity. Game studios and content providers (e.g. Pragmatic Play, Evolution Gaming) solely for the purpose of delivering their games to your session. Fraud detection and security technology providers. Law enforcement and regulatory bodies where we are legally required to disclose data.

tk666 uses the following categories of cookies and similar technologies on the Platform:

• Strictly necessary cookies: required to operate the Platform, maintain your login session, and prevent fraud. These cannot be disabled without breaking core Platform functionality.
• Preference cookies: store your language and display settings so they persist across sessions without requiring re-entry each visit.
• Analytics cookies: aggregate, anonymised session data used to understand how players navigate the Platform and to identify technical issues and improvement opportunities.
• Fraud-prevention tokens: short-lived device fingerprinting tokens used by our security systems to detect account takeover attempts, unusual login patterns, and prohibited automation.

tk666 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by law. Specifically: active account data is retained for the lifetime of the account plus 5 years following account closure; KYC documentation is retained for a minimum of 5 years from the date of verification; transaction records are retained for a minimum of 5 years from the date of the transaction; and game session logs are retained for 2 years.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and product improvement purposes.

tk666's primary data processing infrastructure is located in secured data centres. Some personal data may be transferred to, and processed by, third-party service providers operating in jurisdictions outside Bangladesh. Where such transfers occur, tk666 ensures that appropriate safeguards are in place, including:

• Standard contractual clauses or equivalent safeguards between tk666 and the receiving entity.
• Contractual requirements on third-party processors to implement security standards equivalent to those applied by tk666.
• Ongoing monitoring of third-party processors to confirm continued compliance with data protection obligations.

By using the Platform, you acknowledge and consent to the transfer of your personal data as described in this section, subject to the safeguards outlined above.

tk666 implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, or destruction. Security measures include: 256-bit SSL/TLS encryption for all data in transit; AES-256 encryption for sensitive data at rest; role-based access controls limiting internal data access to authorised personnel only; multi-factor authentication for administrative system access; automated intrusion detection and alerting; and regular independent security assessments.

In the event of a personal data breach that is likely to result in a risk to your rights, tk666 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach. No security system is completely impenetrable, and tk666 cannot guarantee absolute security; however, we are committed to maintaining industry-standard protections at all times.

The Platform is strictly intended for persons aged 21 and above. tk666 does not knowingly collect personal data from any person under the age of 21. If you believe that a person under 21 has provided personal data to tk666, please contact us immediately at [email protected] so that we may take prompt action to delete that data.

tk666 employs age verification technology during registration and KYC processes to screen out underage applicants. Any account found to have been opened by a person under 21 will be closed immediately, all funds will be returned, and all personal data associated with the account will be deleted in accordance with our data retention policy.

tk666 may send you promotional communications about bonuses, new games, and special offers by the contact method you selected during registration, where you have given your prior consent. You may opt out of marketing communications at any time by contacting [email protected] or updating your notification preferences within your account settings. Opting out of marketing communications does not affect service communications that are necessary for the operation of your account (such as deposit confirmations, withdrawal notifications, and account security alerts).

tk666 does not share your contact details with third-party advertisers or affiliate marketing networks for the purpose of allowing those parties to send you unsolicited commercial communications.

tk666 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. When we make material changes, we will update the effective date displayed at the top of this page. We encourage you to review this Policy periodically. Your continued use of the Platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms.

If we make changes that materially affect your rights, we will provide a prominent notice on the Platform prior to the change taking effect, where technically and practically feasible.

If you have any questions, concerns, or requests relating to this Privacy Policy or tk666's data processing practices, please contact our privacy team in writing. We aim to acknowledge all privacy enquiries within 5 business days and to provide a full response within 30 days. For urgent account security matters, please use the live chat feature available directly on the Platform.