tk599 Privacy Policy — How We Handle Your Data

tk599 collects personal data through three main channels: information you provide directly when registering or using the platform, information generated automatically by your use of the platform, and information received from third-party partners in connection with payment processing and identity verification.

Information You Provide Directly

• Registration data: your full legal name, date of birth, registered mobile number and any username you choose.
• KYC documentation: government-issued identity documents, proof of address and proof of payment method ownership submitted during the account verification process.
• Financial data: deposit amounts, withdrawal amounts, payment method identifiers (e.g. bKash wallet number, Nagad number) and transaction history.
• Support communications: messages you send to the support team via email, including any attachments or additional personal information shared voluntarily during the correspondence.

Information Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution and mobile network operator.
• Session and usage data: pages visited within the platform, time spent on each page, game sessions initiated, wagers placed, navigation patterns and referring URLs.
• Cookie data: session identifiers, preference cookies, authentication tokens and analytics identifiers. See Section 5 for full cookie details.

Information from Third Parties

• Payment verification data received from bKash, Nagad, Rocket, Upay and other payment partners to confirm transaction status and detect fraudulent activity.
• Identity verification data from KYC service providers where tk599 uses a third-party verification service to validate documents submitted by players.
• Fraud and risk intelligence data from industry-standard fraud detection partners, used solely to protect the platform and its players from financial crime.

tk599 does not sell, rent or trade your personal data. We share personal information only in the following limited circumstances, and only to the extent strictly necessary for each purpose:

• Payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard and Dutch-Bangla Bank): transaction data necessary to process deposits and withdrawals is shared with the relevant payment partner.
• KYC and identity verification partners: identity documents and related data are shared with regulated verification service providers solely for the purpose of satisfying our age and identity verification obligations.
• Game content providers (Pragmatic Play, Evolution Gaming, Microgaming, Ezugi, Spribe and others): session tokens and anonymised player identifiers are shared with game providers to facilitate game loading and fair-play auditing. These providers do not receive your name, mobile number or payment details.
• Legal and regulatory authorities: personal data may be disclosed to law enforcement or regulatory bodies where tk599 is legally obliged to do so, for example in connection with an anti-money-laundering investigation or a court order.

All third parties with whom tk599 shares personal data are contractually required to implement appropriate technical and organisational security measures to protect that data. They may not use the data for any purpose beyond that for which it was originally shared.

tk599 implements a layered security architecture to protect personal data from unauthorised access, alteration, disclosure or destruction. Key security measures in place include: 256-bit SSL/TLS encryption for all data in transit between your device and our servers; encrypted storage for sensitive data fields including payment identifiers and identity document references; access controls that restrict personal data access to authorised personnel only on a need-to-know basis; regular security audits and penetration testing of platform infrastructure; and automatic session expiry to reduce the risk of unauthorised account access on shared or unattended devices.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, tk599 will notify affected users as promptly as practicable. You play an important role in your own account security — please use a strong unique password, do not share your credentials with anyone and contact [email protected] immediately if you suspect any unauthorised activity on your account.

As a user of the tk599 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, submit your request in writing to [email protected]. We will acknowledge your request within two business days and aim to fulfil it within 30 calendar days. We may need to verify your identity before processing certain requests.

• Right of access: request a copy of the personal data tk599 holds about you, including the categories of data, the purposes for processing and any third parties with whom it has been shared.
• Right of rectification: request correction of inaccurate or incomplete personal data held on your account.
• Right to erasure: request deletion of personal data where tk599 no longer has a lawful basis to retain it, subject to applicable legal retention obligations.
• Right to restriction: request that tk599 restrict processing of your personal data to storage only, pending resolution of a dispute about its accuracy or lawfulness.
• Right to object: object to processing of your personal data for purposes based on legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.

tk599 will not charge a fee for exercising any of the above rights in ordinary circumstances. We may charge a reasonable fee or decline to act if requests are manifestly unfounded, repetitive or excessive. Where we decline a request, we will explain the reason in writing.

tk599 reserves the right to update this Privacy Policy at any time. Where changes are material, we will post a notice on the platform and update the "Last updated" date at the top of this page. Continued use of the platform following any update constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to remain informed about how we protect your information.

For all privacy enquiries, data subject access requests, erasure requests, rectification requests or objections to processing, please contact our privacy team in writing at [email protected]. Please include your registered mobile number and a brief description of your request so we can route it to the correct team member and respond efficiently. We aim to acknowledge all privacy correspondence within two business days (Bangladesh Standard Time, UTC+6) and to resolve requests within 30 calendar days of receipt.