tk44 Privacy Policy

This Privacy Policy ("Policy") applies to all personal data processed by tk44 ("the Company", "we", "us", "our") in connection with the operation of the online gaming and sports betting platform accessible at tk44.bar ("the Platform"). It governs how we handle the personal information of registered players, prospective players, and visitors to the Platform who are located in Bangladesh or otherwise access our services.

We are committed to handling your personal data with care , transparency, and full respect for your rights. This Policy is written in plain English to ensure that every tk44 player — wherever they are in Bangladesh, from Dhaka to Chittagong, Sylhet to Cox's Bazar — can clearly understand how their data is managed.

By accessing the Platform, registering an account, or otherwise engaging with our services, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which form part of the overall agreement governing your relationship with tk44.

For the purposes of this Privacy Policy, tk44 acts as the data controller in respect of all personal data collected through the Platform. As data controller, tk44 determines the purposes and means by which your personal data is processed.

All data protection enquiries, access requests, and formal complaints relating to privacy matters should be directed to the tk44 Data Protection team using the contact details provided in Section 14 of this Policy. We will acknowledge all privacy-related correspondence within five (5) business days and aim to resolve substantive matters within thirty (30) calendar days.

tk44 collects the minimum amount of personal data necessary to deliver a safe, compliant, and high-quality gaming experience. The categories of data we collect are described in the table below.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond ID photographs for KYC purposes), or health information unless specifically required by law or responsible gaming obligations.

4.1 Directly from You

The majority of personal data we hold is provided directly by you during the account registration process, when completing KYC verification, when making deposits or withdrawing funds, when contacting our support team, and when updating your account preferences.

4.2 Automatically Through the Platform

When you access the Platform, our servers automatically collect technical and usage data including your IP address, device identifiers, browser fingerprint, session duration, and detailed records of all gaming activity. This data is collected via server logs, cookies, and similar tracking technologies as described in Section 9 of this Policy.

4.3 From Third Parties

We may receive personal data about you from third-party sources in limited, specific circumstances, including:

• Payment processors and mobile banking operators (bKash, Nagad, Rocket, Upay) confirming transaction status and account ownership
• KYC and identity verification service providers who assist us in confirming the authenticity of documents submitted
• Fraud prevention and anti-money laundering (AML) screening databases used to comply with our legal obligations
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) who may share aggregate gameplay data relevant to your account

tk44 processes your personal data only where a valid legal basis exists. The primary purposes for which we process your data, together with the corresponding legal basis for each, are set out below.

5.1 Account Management and Service Delivery

We process identity, contact, and account data to create and maintain your player account, authenticate your login sessions, process deposits and withdrawals, calculate and credit winnings, and deliver the gaming services you have requested. The legal basis is the performance of a contract between you and tk44.

5.2 Legal and Regulatory Compliance

We are required to process identity, financial, and verification data to comply with our legal obligations, including KYC, anti-money laundering (AML), and responsible gaming obligations. This includes age verification (confirming all players are 21 or older), sanctions screening, and the detection of suspicious financial activity. The legal basis is compliance with a legal obligation.

5.3 Fraud Prevention and Platform Security

We process technical and usage data to detect and prevent fraudulent activity, multi-accounting, bonus abuse, collusion, and unauthorised access to the Platform. The legal basis is our legitimate interest in maintaining the security and integrity of the Platform for all users.

5.4 Responsible Gaming

We analyse usage and wagering data to identify patterns that may indicate problem gambling behaviour, to apply the responsible gaming tools requested by players (such as deposit limits and self-exclusion), and to fulfil our duty of care obligations. The legal basis is both compliance with legal obligations and our legitimate interest in player welfare.

5.5 Customer Support

We process communications and account data to respond to your support queries, resolve disputes, and improve the quality of our customer service. The legal basis is the performance of a contract and our legitimate interest in delivering effective support.

5.6 Marketing Communications

Where you have provided your explicit opt-in consent, we may use your contact data to send you promotional communications about bonuses, new games, and platform updates by email or SMS. You may withdraw consent at any time by using the unsubscribe link in any marketing email or by contacting our support team. The legal basis is consent.

5.7 Platform Improvement and Analytics

We use aggregated and anonymised technical and usage data to understand how the Platform is used, to identify areas for improvement, and to develop new features. This analytics processing does not involve direct identification of individual players. The legal basis is our legitimate interest in improving Platform performance.

tk44 does not sell your personal data to any third party for commercial marketing purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the relevant purpose.

6.1 Service Providers

We engage carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These include payment processing partners (bKash, Nagad, Rocket, Visa, Mastercard), KYC and identity verification providers, cloud hosting and infrastructure providers, and cybersecurity service providers. All service providers are required to process your data solely on our instructions and in accordance with appropriate data protection standards.

6.2 Game Content Providers

To deliver the gaming experiences available on the Platform, limited gameplay and account data is shared with licensed game studio providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers operate under their own privacy frameworks and are independently regulated gaming entities.

6.3 Legal and Regulatory Authorities

We may disclose personal data to competent legal or regulatory authorities where we are required to do so by applicable law, court order, or regulatory direction. This includes disclosure to anti-money laundering and financial intelligence units where transaction patterns meet mandatory reporting thresholds. We will notify you of any such disclosure where we are legally permitted to do so.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the tk44 business, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the privacy terms that will apply to your data following the transfer.

tk44 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, and accounting obligations. Our standard retention periods are as follows:

• Active account data: Retained for the duration of your account relationship with tk44, plus five (5) years following account closure to meet AML record-keeping obligations.
• KYC and identity verification documents: Retained for a minimum of five (5) years following the end of the business relationship, in line with anti-money laundering requirements.
• Transaction and financial records: Retained for seven (7) years from the date of each transaction for accounting and tax compliance purposes.
• Customer support communications: Retained for three (3) years following resolution of the support interaction, unless the matter is subject to ongoing dispute or legal proceedings.
• Marketing preference records: Retained for two (2) years from the date of opt-out or last interaction, to demonstrate compliance with consent requirements.
• Technical and server log data: Retained for twelve (12) months, after which it is anonymised or deleted.

When data is no longer required, it is securely deleted or irreversibly anonymised using industry-standard methods. Anonymised data may be retained indefinitely for statistical and analytical purposes as it can no longer be linked to any identifiable individual.

tk44 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or destruction. Our security framework includes, but is not limited to, the following measures:

• Encryption in transit: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. Our Platform enforces HTTPS across all pages and API endpoints.
• Encryption at rest: Sensitive personal and financial data stored on our servers is encrypted using AES-256 encryption.
• Access controls: Access to personal data is strictly limited to authorised personnel on a need-to-know basis. All staff with data access are subject to confidentiality obligations and regular security training.
• Password security: Player passwords are stored as salted cryptographic hashes. Plain-text passwords are never stored or transmitted by tk44 systems.
• Intrusion detection: Our infrastructure is monitored continuously by automated intrusion detection and anomaly alerting systems.
• Regular security audits: We conduct periodic third-party security assessments, penetration tests, and vulnerability scans to identify and remediate security risks.

While we implement robust security measures, no internet-based system can be guaranteed to be entirely free from risk. We encourage you to use a strong, unique password for your tk44 account, to enable any two-factor authentication options offered on the Platform, and to notify us immediately if you suspect any unauthorised activity on your account.

9.1 What Are Cookies

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites function correctly, to improve user experience, and to provide analytical information to site operators. tk44 uses cookies and similar technologies (including local storage, session storage, and pixel tags) on the Platform.

9.2 Types of Cookies We Use

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your visit. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: Store your preferences such as language settings, display options, and responsible gaming tool configurations, so the Platform remembers your choices between visits.
• Analytical cookies: Collect anonymised data about how visitors use the Platform — which pages are visited most frequently, how long sessions last, and where users navigate from. This helps us improve the Platform experience.
• Security cookies: Used to detect fraudulent activity, identify suspicious login patterns, and protect player accounts from unauthorised access attempts.

9.3 Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to block third-party cookies, clear existing cookies, and set preferences for future cookie use. Please be aware that disabling strictly necessary cookies will impair or prevent your ability to log in and use the Platform. For instructions on managing cookies in your specific browser, consult your browser's help documentation.

tk44 respects your rights in relation to your personal data. Subject to applicable legal requirements and any overriding obligations we hold (such as AML record-keeping duties), you hold the following rights in respect of the personal data we process about you:

• Right of access: You may request a copy of all personal data we hold about you. We will provide this within thirty (30) calendar days of a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. You may also update many details directly through your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer needed for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restriction of processing: You may request that we temporarily cease certain processing activities in specific circumstances, such as while the accuracy of data is being verified.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing based on legitimate interests, including profiling. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

To exercise any of the above rights, please contact us using the details in Section 14. We may be required to verify your identity before processing a data rights request. We will not charge a fee for reasonable requests but reserve the right to charge an administrative fee for manifestly excessive or repetitive requests.

The tk44 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. If we discover that personal data has been submitted by or on behalf of a minor, we will immediately suspend the associated account, delete the data as soon as practicable, and void any transactions associated with that account.

If you are a parent or guardian and believe that a minor in your care has registered on the Platform or submitted personal data to tk44, please contact us immediately at [email protected]. We take reports of underage access extremely seriously and will respond on a priority basis.

Given the international nature of the online gaming industry, some of the third-party service providers engaged by tk44 — including game studio partners, cloud infrastructure providers, and KYC verification services — may process your personal data in countries outside Bangladesh. Where such international transfers occur, tk44 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

Safeguards may include contractual clauses requiring the recipient to protect data to equivalent standards, use of service providers who operate under internationally recognised data protection frameworks, and technical measures such as end-to-end encryption applied prior to any cross-border transmission.

By using the tk44 Platform and accepting this Privacy Policy, you acknowledge that your data may be processed in jurisdictions outside Bangladesh as described above.

tk44 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our business practices, or the services we offer. When material changes are made, we will notify registered players by email to the address associated with their account and/or by posting a prominent notice on the Platform.

The updated Policy will display the revised effective date at the top of this page. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should stop using the Platform and contact us to close your account.

We encourage you to review this page periodically to stay informed about how we protect and manage your personal data. The current version of this Policy supersedes all prior versions.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a privacy concern, please reach out to the tk44 Data Protection team through any of the following channels:

• Email: [email protected] — displayed as plain text; not a clickable link
• Live Chat: Available 24 hours a day, 7 days a week via the on-site chat widget on the Platform
• WhatsApp: +880 1700 000000 — available 08:00 to 24:00 Bangladesh Standard Time (BST, UTC+6)

All privacy-related correspondence will be acknowledged within five (5) business days. Substantive data rights requests will be resolved within thirty (30) calendar days. Where a request is particularly complex, we may extend this period by a further two (2) months, in which case we will notify you of the extension and the reason for it.

We aim to resolve all privacy concerns directly. If, however, you feel that your concern has not been addressed satisfactorily, you may have the right to lodge a complaint with a relevant supervisory authority in your jurisdiction.