Privacy Policy — How tk1666 Protects Your Data

1. Information We Collect

tk1666 collects personal information in several ways: directly from you when you register an account or contact support, automatically when you use the platform, and from third parties such as payment processors and identity verification services. The categories of data we collect are described in full below.

1.1 Information You Provide Directly

When you register an account with tk1666, you are required to provide the following information:

• Full Legal Name: As it appears on your government-issued identification document.
• Date of Birth: To verify that you meet the 18+ age requirement for using the platform.
• Residential Address: Including district, city, and postcode. Players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar are required to provide their current residential address.
• Email Address: Used for account communications, verification emails, and promotional messages where consent has been given.
• Mobile Phone Number: Used for two-factor authentication, account alerts, and WhatsApp support communication.
• Account Credentials: Your chosen username and a hashed (never plaintext) version of your password.

During the KYC (Know Your Customer) verification process, we additionally collect:

• Identity Documents: Scanned copies or photographs of your National Identity Card (NID), passport, or other government-issued photo ID.
• Proof of Address: Utility bills, bank statements, or official correspondence confirming your residential address, dated within the last three months.
• Payment Method Verification: Screenshots or statements confirming ownership of your bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, or other payment account.
• Selfie or Live Photo: In some cases, a real-time photograph may be requested to confirm that the account holder matches their identity documents.

1.2 Information Collected Automatically

When you access and use the tk1666 platform, our systems automatically collect certain technical and behavioural data, including:

• Device Information: Device type, operating system, browser type and version, screen resolution, and device identifier.
• IP Address and Geolocation: Your internet protocol address and the approximate geographic location it corresponds to, used to enforce jurisdictional compliance and detect fraudulent access.
• Session Data: Pages visited, time spent on each section, betting and gaming activity logs, login timestamps, and logout timestamps.
• Transaction Records: Complete records of all deposits, withdrawals, wagers placed, game results, bonus activations, and balance adjustments.
• Communication Logs: Records of interactions with our live chat, email support, and WhatsApp support channels.

1.3 Information from Third Parties

tk1666 may receive personal data about you from trusted third parties in the following circumstances:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard may provide transaction confirmation data and partial payment details to allow us to reconcile deposits and withdrawals against your account.
• Identity Verification Partners: Third-party KYC service providers may confirm the authenticity of identity documents you submit during the verification process.
• Fraud Prevention Services: Risk and fraud monitoring services may share data about known fraudulent actors or suspicious behaviour patterns to help us protect the platform and its users.
• Self-Exclusion Registers: Where applicable, self-exclusion data from shared registers may be used to prevent excluded players from accessing our services.

2. How We Use Your Data

tk1666 processes personal data for the following specific, legitimate purposes. We do not use your data for any purpose that is incompatible with the reasons stated below.

Purpose	Data Used	Legal Basis
Account Creation and Management	Name, email, date of birth, phone number, address	Contract performance
Identity and Age Verification (KYC)	ID documents, proof of address, selfie	Legal obligation
Payment Processing	Payment method details, transaction records	Contract performance
Fraud Detection and Prevention	IP address, device data, session logs, transaction patterns	Legitimate interests
Responsible Gaming Monitoring	Betting history, session frequency, deposit patterns	Legal obligation / Legitimate interests
Customer Support	Communication logs, account data	Contract performance
Marketing Communications	Email address, phone number, betting preferences	Consent (opt-in only)
Platform Analytics and Improvement	Session data, device data, feature usage	Legitimate interests
Legal Compliance and Dispute Resolution	All categories as required	Legal obligation

2.1 Marketing Communications

tk1666 will only send you promotional emails, SMS messages, or WhatsApp notifications if you have explicitly opted in to receive such communications during registration or via your account settings. Every marketing communication we send includes a clear and functional unsubscribe mechanism. If you withdraw your consent for marketing communications, we will process your opt-out within 5 business days and you will receive no further promotional messages. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

2.2 Automated Decision-Making

tk1666 uses automated systems for fraud detection, bonus abuse identification, and responsible gaming monitoring. These systems may automatically flag accounts for review or apply temporary restrictions based on predefined risk criteria. Where an automated decision significantly affects your account — such as a temporary payment hold or account suspension — you have the right to request human review of that decision by contacting our support team at [email protected].

3. Data Sharing and Disclosure

tk1666 does not sell, rent, or otherwise commercially exploit your personal data. We share personal information only in the specific circumstances described below, and only to the minimum extent necessary for each stated purpose.

3.1 Service Providers and Processors

We engage a limited number of carefully vetted third-party service providers to assist with the operation of the tk1666 platform. These include payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification services, cloud hosting providers, cybersecurity firms, and customer support tooling providers. All service providers who process personal data on behalf of tk1666 are required to sign a data processing agreement that obligates them to handle your data in accordance with strict security and confidentiality standards, and to use it only for the specific purpose for which it was shared.

3.2 Game Providers

Casino games and slot titles available on the tk1666 platform are supplied by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. To facilitate gameplay and game history logging, these providers may receive your account identifier and game session data. They do not receive your full name, address, or payment details unless separately required for their own compliance obligations.

3.3 Legal and Regulatory Disclosure

tk1666 may disclose personal data to law enforcement agencies, regulatory bodies, or courts when we are required to do so by applicable law, court order, or regulatory demand. We will only provide the minimum data necessary to satisfy the legal requirement. Where legally permitted, we will notify affected account holders of such disclosures in advance.

3.4 Business Transfers

In the event that tk1666 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, personal data held by the platform may be transferred to the acquiring entity as part of that transaction. In such circumstances, we will notify affected users via the email address registered to their account prior to any transfer taking place, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

4. Cookies and Tracking Technologies

tk1666 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, analyse usage patterns, and detect fraudulent behaviour. By continuing to use the tk1666 platform after being presented with our cookie notice, you consent to the use of cookies as described below.

4.1 Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your security settings, and prevent cross-site request forgery attacks. These cookies cannot be disabled.
• Functional Cookies: These cookies remember your preferences such as your preferred language, display settings, and recently viewed game categories. Disabling these cookies may affect your experience on the platform.
• Analytical Cookies: These cookies collect aggregated, anonymised data about how players navigate the platform — which pages are most visited, how long sessions last, and where users encounter difficulties. This data helps us improve the platform.
• Security and Fraud Prevention Cookies: These cookies are used to identify and investigate suspicious activity, including account takeover attempts, multi-account creation, and automated bot behaviour.

4.2 Managing Cookies

You can manage or delete cookies at any time using your web browser's settings. Instructions for the most commonly used browsers are available on their respective support pages. Please note that disabling strictly necessary cookies will prevent you from logging in and using core platform features. Disabling analytical cookies will not affect your ability to use the platform but will limit our ability to understand and improve the user experience. tk1666 does not currently respond to browser "Do Not Track" signals, though we continue to monitor industry standards in this area.

5. Data Security Measures

tk1666 takes the security of your personal data extremely seriously. We implement a comprehensive, layered security framework designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include the following:

• 256-bit SSL/TLS Encryption: All data in transit between your browser or mobile device and tk1666 servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Data Encryption at Rest: Sensitive personal data and payment information stored on our servers is encrypted at rest using AES-256 encryption, ensuring that raw data is unreadable without the appropriate decryption keys.
• Access Controls: Access to personal data is restricted to authorised tk1666 personnel on a strict need-to-know basis. All staff with access to personal data undergo security training and are bound by confidentiality obligations.
• Two-Factor Authentication: tk1666 offers and recommends two-factor authentication (2FA) for all account holders. Enabling 2FA significantly reduces the risk of unauthorised account access even if your password is compromised.
• Regular Security Audits: We conduct periodic internal security reviews and engage independent cybersecurity professionals to carry out penetration testing and vulnerability assessments of our platform infrastructure.
• Incident Response Plan: In the event of a data security incident that poses a risk to your rights or freedoms, tk1666 will notify affected users within 72 hours of becoming aware of the breach, and will take immediate remedial action to contain and address the incident.

6. Data Retention Policy

tk1666 retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply to the main categories of personal data we hold:

Data Category	Retention Period	Reason
Account Registration Data	Duration of account + 5 years post-closure	Legal obligation, dispute resolution
KYC / Identity Documents	5 years from submission or account closure	Regulatory compliance
Transaction and Betting Records	5 years from transaction date	Financial regulation, audit trail
Customer Support Logs	3 years from last interaction	Service quality, dispute resolution
Marketing Preferences	Until consent is withdrawn	Consent-based processing
Session and Technical Logs	12 months	Security monitoring, fraud detection
Self-Exclusion Records	Indefinite	Player protection, responsible gaming

Upon expiry of the applicable retention period, personal data is either securely and permanently deleted from our systems or anonymised such that it can no longer be associated with any identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes without restriction.

7. Your Privacy Rights

As a user of the tk1666 platform, you hold a number of rights in relation to the personal data we hold about you. tk1666 is committed to upholding these rights and to responding to all valid requests in a timely and transparent manner. Your rights are as follows:

7.1 Right of Access

You have the right to request a copy of the personal data that tk1666 holds about you, along with information about how that data is being used. We will provide this information within 30 days of receiving your request. Requests can be submitted via email to [email protected] with the subject line "Data Access Request — [your registered email address]".

7.2 Right to Rectification

If any personal data that tk1666 holds about you is inaccurate or incomplete, you have the right to request that we correct or update it. For basic account information (such as your email address or phone number), corrections can typically be made directly within your account settings. For identity-related data (such as your name or date of birth), we may require documentary evidence before making changes.

7.3 Right to Erasure

In certain circumstances, you have the right to request the deletion of your personal data from our systems. This right applies when the data is no longer necessary for the purpose for which it was collected, when you withdraw consent and there is no other legal basis for processing, or when the data has been processed unlawfully. Please note that this right is subject to overriding legal obligations — for example, we are required to retain certain transaction and identity records for a minimum of 5 years for regulatory compliance purposes, and these records cannot be deleted on request during that period.

7.4 Right to Restrict Processing

You may request that we restrict the processing of your personal data in specific circumstances — for example, while a dispute about the accuracy of your data is being resolved, or when you have objected to processing based on legitimate interests and your objection is under consideration. During a restriction period, we will continue to store your data but will not actively process it for the purposes to which the restriction applies.

7.5 Right to Data Portability

Where we process your personal data on the basis of consent or contract performance, you have the right to receive a copy of your data in a structured, commonly used, and machine-readable format (such as CSV or JSON), and to transfer that data to another service provider. Portability requests can be submitted to [email protected].

7.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. In particular, you have the right to object at any time to the use of your data for direct marketing purposes. Where you exercise this right in relation to marketing, we will stop processing your data for that purpose immediately and without requiring justification. Where you object to other legitimate-interest processing, we will consider your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

7.7 Right to Withdraw Consent

Where tk1666 processes your personal data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal. To withdraw consent, log in to your account and update your communication preferences, or contact us directly at [email protected].

8. Policy Updates and Contact

8.1 Changes to This Privacy Policy

tk1666 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, technological developments, legal requirements, or platform features. When material changes are made to this policy, we will notify active account holders via the email address registered to their account and display a prominent notice on the platform for a period of at least 7 days before the changes take effect. The date of the most recent update is displayed at the top of this document. Your continued use of the tk1666 platform after the effective date of any revision constitutes your acceptance of the updated policy.

8.2 Policy Version History

Previous versions of this Privacy Policy are available on request by contacting [email protected]. We maintain a full version history of all policy revisions for transparency and accountability purposes.

8.3 Contact Our Data Team

If you have any questions, concerns, or complaints about this Privacy Policy or about the way in which tk1666 handles your personal data, please do not hesitate to get in touch with our team through any of the following channels:

• Email: [email protected] — responses within 6 hours during operating days
• Live Chat: Available 24 hours a day, 7 days a week via the support widget on tk1666.net
• WhatsApp: Available 08:00 – 00:00 BST (UTC+6)

We treat all privacy-related enquiries with the utmost seriousness and aim to resolve every concern to the full satisfaction of the individual concerned. If you are not satisfied with our response to a privacy complaint, you may escalate the matter to an appropriate independent dispute resolution body.