tkpak Privacy Policy
At tkpak, your privacy is a core commitment — not an afterthought. This Privacy Policy explains exactly what personal data we collect from Bangladesh players, why we collect it, how it is used and protected, and what rights you hold over your information at all times.
Introduction
This Privacy Policy ("Policy") is issued by tkpak, the operator of the online betting and casino platform accessible at https://tkpak.io ("Platform"). It governs the collection, processing, storage, sharing, and protection of personal data relating to all registered players, prospective players, and visitors to the Platform, with particular relevance to players based in Bangladesh.
tkpak is committed to handling your personal data responsibly, transparently, and securely. We recognise that when you entrust us with your personal information — your name, contact details, payment data, and betting history — you are placing genuine confidence in our systems and processes. We do not take that responsibility lightly.
This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. By registering a tkpak account, making a deposit, or using any feature of the Platform, you confirm that you have read and understood this Policy and that you consent to the processing of your personal data as described herein.
Data We Collect
tkpak collects several categories of personal data in the course of operating the Platform and providing services to players based in Bangladesh. The categories and specific data points we collect are set out below.
2.1 Identity & Contact Data
- Full legal name as it appears on your government-issued identification document
- Date of birth (used to verify that you are at least 21 years of age)
- Residential address, including district, city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh), and postcode
- Mobile phone number registered in your name in Bangladesh
- Email address associated with your tkpak account
- Copies of government-issued identification submitted during KYC (Bangladesh NID, passport, or other valid photo ID)
2.2 Financial & Transaction Data
- bKash, Nagad, Rocket, or Upay mobile wallet numbers used for deposits and withdrawals
- Bank account details where bank transfer is used (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, or others)
- Full deposit and withdrawal transaction history, including amounts in BDT (৳), timestamps, and transaction reference numbers
- Bonus redemption and wagering activity records
2.3 Technical & Device Data
- IP address and approximate geolocation derived from IP
- Device type, operating system, and browser version
- Session timestamps, login history, and duration of platform sessions
- Pages visited, features used, and navigation paths within the Platform
- Cookies and similar tracking technologies (see Section 7)
2.4 Betting & Gaming Activity Data
- Full betting history across all sports markets (cricket, football, kabaddi, and others)
- Casino game play history including game titles, stake amounts, and outcomes
- Responsible gaming settings you have applied, including deposit limits, session reminders, and self-exclusion records
- Support tickets, live chat transcripts, and email correspondence with our team
How We Collect Data
tkpak collects personal data through the following channels and interactions:
- Account Registration: Data you provide directly when creating your tkpak account, including name, date of birth, contact details, and chosen credentials.
- KYC Verification: Identity and address documents you upload to complete the Know Your Customer process required before real-money withdrawals are enabled.
- Deposits and Withdrawals: Financial data generated when you transact via bKash, Nagad, Rocket, Upay, or bank transfer through the cashier section of the Platform.
- Platform Usage: Technical and behavioural data collected automatically as you navigate the Platform, place bets, play casino games, and interact with support features.
- Support Interactions: Information you share with our team via live chat, email ([email protected]), or WhatsApp when seeking assistance.
- Cookies and Analytics: Data collected via cookies, session tokens, and analytics tools as described in Section 7 of this Policy.
- Third-Party Verification: Where permitted, identity verification data obtained from official third-party KYC and fraud-prevention services to validate the accuracy of information you have provided.
How We Use Your Data
tkpak uses the personal data it collects exclusively for legitimate operational, legal, and player-welfare purposes. We do not sell your data to third parties for marketing purposes. Specific purposes for which your data is used include:
| Purpose | Data Used |
|---|---|
| Account creation and management | Identity, contact, and credential data |
| Age and identity verification (KYC) | Name, date of birth, NID / passport copy |
| Processing deposits and withdrawals | Financial and transaction data |
| Fraud detection and AML compliance | Transaction history, device and IP data |
| Responsible gaming monitoring | Betting activity, deposit patterns, session data |
| Customer support delivery | Contact data, support correspondence |
| Personalised promotional communications | Contact data, game and betting preferences |
| Platform security and technical operations | Device, IP, and session data |
| Legal and regulatory compliance | All categories as required by applicable law |
When tkpak uses your contact data to send you promotional communications — such as bonus offers tied to BPL, IPL, T20 World Cup, Eid, or Pohela Boishakh — you have the right to opt out of such communications at any time by contacting our support team. Opting out of marketing does not affect the delivery of transactional account communications, which are required for the operation of your account.
Legal Basis for Processing
tkpak processes your personal data on one or more of the following legal grounds, depending on the nature and purpose of the processing activity:
- Contractual Necessity: Processing that is necessary to perform our obligations to you under the Terms & Conditions — including operating your account, processing transactions, and settling bets — is carried out on the basis that it is required for the contract between us.
- Legal Obligation: Processing carried out to comply with applicable legal requirements, including anti-money-laundering (AML) obligations, age verification duties, and record-keeping requirements mandated by applicable law.
- Legitimate Interests: Processing for purposes such as fraud detection, platform security, responsible gaming monitoring, and analytics, where those interests are not overridden by your privacy rights.
- Consent: Processing for the purpose of sending you optional marketing and promotional communications, where you have provided explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before your withdrawal.
Data Sharing & Disclosure
tkpak does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for each stated purpose.
6.1 Payment Processing Partners
To process your deposits and withdrawals, we share the necessary financial identifiers (such as your bKash or Nagad wallet number and transaction amounts) with our authorised payment partners. These partners are contractually bound to use the data only for payment processing and to apply equivalent security standards to those maintained by tkpak.
6.2 Game Studio Providers
To facilitate live casino, slots, crash games, and sports-book features, tkpak shares a player session token and stake-related data with licensed third-party game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. No personally identifiable data (name, NID, contact details) is transmitted to game studios beyond what is required for session authentication and fair-game auditing.
6.3 Identity Verification Services
During KYC, your identity documents may be processed by a third-party identity verification service. These providers operate under strict data processing agreements and are prohibited from retaining or using your data beyond the scope of the verification task.
6.4 Legal and Regulatory Authorities
tkpak will disclose personal data to law enforcement agencies, regulatory bodies, or other official authorities when required to do so by applicable law, court order, or other binding legal process. Where legally permitted, we will notify you of any such disclosure request before complying.
6.5 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or a portion of tkpak's business, personal data held about registered players may form part of the transferred assets. In such circumstances, we will provide advance notice via the email address on your account and ensure that any successor entity is bound by privacy obligations at least as protective as those in this Policy.
Cookies & Tracking Technologies
tkpak uses cookies and similar technologies to provide a functional, personalised, and secure platform experience. A cookie is a small text file stored on your device by your browser when you visit a website. The types of cookies we use are described below.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session authentication, security tokens, fraud detection flags. Required for the Platform to function — cannot be disabled. | Session / up to 24 hrs |
| Functional | Remembering your preferred language, odds format, and responsible gaming settings across sessions. | Up to 12 months |
| Analytics | Aggregate, anonymised usage data to understand how players navigate the Platform and identify technical issues. | Up to 13 months |
| Marketing | Tracking interactions with promotional content to measure campaign effectiveness. Only active where you have provided consent. | Up to 90 days |
You can manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling analytics or marketing cookies will not affect core Platform functionality. For detailed guidance on managing cookies in popular browsers used in Bangladesh, please consult your browser's help documentation.
Data Retention
tkpak retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, and to resolve disputes or enforce agreements. The following general retention periods apply:
- Active Account Data: Retained for the full duration of your account's active status plus a minimum of five (5) years from the date of account closure, to satisfy AML and legal record-keeping obligations.
- Transaction Records: Deposit and withdrawal records are retained for a minimum of seven (7) years from the date of each transaction, consistent with standard financial record-keeping requirements.
- KYC Documents: Identity and address verification documents are retained for a minimum of five (5) years from the date of account closure or last transaction, whichever is later.
- Support Correspondence: Live chat transcripts, email exchanges, and support ticket records are retained for three (3) years from the date of the interaction.
- Marketing Consent Records: Records of your consent to receive marketing communications are retained for the duration of your account and for three (3) years following account closure or withdrawal of consent.
- Technical and Analytics Data: Anonymised, aggregated analytics data may be retained indefinitely as it cannot be attributed to any individual player.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Where technical constraints prevent immediate deletion, data is quarantined and restricted from active processing until deletion is completed.
Data Security
tkpak implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures in place include:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and tkpak servers is encrypted using industry-standard 256-bit SSL/TLS protocols. You will always see a secure HTTPS connection when using the Platform.
- Encrypted Data Storage: Sensitive personal and financial data stored on tkpak servers is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data.
- Access Controls: Access to personal data within tkpak's internal systems is strictly limited to personnel who require that access to perform their job functions. All staff with data access are subject to confidentiality obligations.
- Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their tkpak account. Internal administrative access to player data systems requires mandatory multi-factor authentication.
- Intrusion Detection and Monitoring: Our systems are monitored continuously for suspicious activity, unauthorised access attempts, and anomalous transaction patterns.
- Regular Security Audits: tkpak conducts periodic internal security reviews and engages independent third-party auditors to assess the effectiveness of our data security controls.
While tkpak takes every reasonable precaution to protect your data, no internet transmission or electronic storage system is completely immune from risk. You are responsible for keeping your account credentials confidential and for notifying support immediately at [email protected] if you suspect any unauthorised access to your account.
Your Rights
As a tkpak player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and a description of your specific request. We will respond within 30 days of receiving a valid, verified request.
- Right of Access: You have the right to request a copy of all personal data tkpak holds about you, together with a summary of how it is used and who it has been shared with.
- Right to Rectification: If any of your personal data held by tkpak is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic contact details directly from your account dashboard; for corrections to KYC-verified identity data, please contact support.
- Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Note that we are required by law to retain certain categories of data (transaction records, KYC documents) for specified minimum periods even following account closure, and erasure requests cannot override these obligations.
- Right to Restrict Processing: In certain circumstances (for example, while the accuracy of your data is under dispute), you have the right to request that we restrict processing of your data to storage only.
- Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive a structured, machine-readable copy of the personal data you provided to tkpak.
- Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming or fraud detection purposes, unless tkpak can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Consent: Where processing is based on your consent (for example, receiving marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Children's Privacy
The tkpak Platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or store personal data relating to any person under the age of 21. If we become aware that a person under 21 has created an account or provided personal data to tkpak, we will immediately close that account, delete all associated personal data to the extent not required to be retained for legal compliance purposes, and return any deposits made after deducting processed withdrawals.
If you are a parent or guardian and believe that your child may have accessed or registered on the tkpak Platform, please contact our support team immediately at [email protected]. We treat all such reports with the highest priority and act upon them without delay.
Third-Party Services
The tkpak Platform integrates services and content from authorised third-party partners — including game studios (Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe), payment processors (bKash, Nagad, Rocket, Upay), and analytics providers. These third parties may process personal data in connection with the services they deliver on or for the Platform.
Each third-party partner operates under its own privacy policy, which governs how that partner handles data within its own systems. tkpak is not responsible for the privacy practices of third-party partners beyond the scope of the data processing agreements we have in place with them. We encourage you to review the privacy policies of any third-party service you interact with directly, including your mobile payment provider (bKash, Nagad, or Rocket).
tkpak does not permit its third-party partners to use your personal data for their own marketing or commercial purposes. Any data shared with a partner is used solely to deliver the contracted service (e.g., processing your payment, authenticating your game session, or verifying your identity).
Changes to This Policy
tkpak reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. When we make a material change — one that meaningfully affects how we collect, use, or share your personal data — we will notify you via the email address associated with your account or via a prominent in-platform notification at least 14 days before the change takes effect.
Minor changes, such as clarifications of existing provisions, corrections of typographical errors, or updates to contact information, may be made without advance notice and take effect immediately upon publication. The "Last Updated" date displayed at the top of this page and in the hero section above will reflect the date of the most recent revision.
Your continued use of the tkpak Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with a material change, you should cease using the Platform and close your account before the change takes effect. Closing your account does not affect any data retention obligations that apply to data collected prior to closure.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data tkpak holds about you, please contact our dedicated data support team. All contact details are provided as plain text and are not clickable links:
- Data Enquiries Email: [email protected] — please use the subject line "Privacy / Data Rights Request" for the fastest routing
- WhatsApp: +880 1700 000000 (plain text — not a clickable link)
- Live Chat: Available 24 hours a day, every day of the year, directly on the tkpak Platform — average response time 2–5 minutes
- Support Hours: All day, every day — Bangladesh Standard Time (BST, UTC+6)
When submitting a data rights request, please include your registered account username and a clear description of your specific request so that our team can verify your identity and process your query as efficiently as possible. We target a response time of no more than 30 days for all data rights requests and will acknowledge receipt within 3 business days.
How tkpak Protects Your Privacy
These commitments underpin every decision we make about your personal data at tkpak.
Every byte of data exchanged between your device and tkpak servers travels over 256-bit SSL/TLS encryption. Your credentials, transaction details, and betting history are never exposed in plain text at any point in transit.
Mandatory identity verification ensures that only genuine, age-verified adults aged 21 and above can access real-money features on tkpak. Your submitted documents are stored securely and never shared beyond authorised verification partners.
All personally identifiable information and financial records stored on tkpak infrastructure are encrypted at rest using AES-256 standards. Encryption keys are managed in isolated, access-controlled environments separate from the data they protect.
tkpak does not sell, rent, or trade your personal data to third parties for their own commercial purposes — ever. Data shared with partners is strictly limited to what is necessary for them to deliver the contracted service on our behalf.
Access, correct, export, or delete your data — your rights are clearly defined and actively supported by our team. Submit a data rights request to [email protected] and receive a verified response within 30 days, with acknowledgement in 3 business days.
tkpak keeps your data only for as long as legally required or operationally necessary. Clear retention schedules govern every data category — from transaction records held for seven years to support transcripts cleared after three — with secure deletion upon expiry.
Your Data Is Safe — Now Let's Play
You've reviewed how tkpak handles your personal data. Head back to the platform, explore cricket markets, spin the slots, or visit the live casino. We've got you covered — securely.