Privacy Policy — tkfb

1. Information We Collect

When you register an account with tkfb, use our betting and gaming services, or contact our support team, we collect certain categories of personal information. The scope of data collected depends on the nature of your interaction with the platform. We categorise the information we collect as follows.

2. How We Use Your Data

tkfb processes personal data for specific, documented purposes. We do not use your personal data for any purpose incompatible with the reason it was originally collected. The primary purposes for which we process your data are set out below.

• Account creation and management. We use your identity and contact data to create, maintain, and secure your tkfb account, to authenticate your login sessions, and to communicate important account-related information such as password reset confirmations, deposit receipts, and withdrawal status updates.
• Payment processing and fraud prevention. Financial data is used to process deposits and withdrawals via your chosen payment method, to verify payment method ownership, and to detect and prevent fraudulent transactions, money laundering, and other financial crimes.
• Platform personalisation. Usage data and betting history allow tkfb to tailor the content and game recommendations presented to you based on your activity patterns. Personalisation is performed using automated logic, and you may opt out by contacting support.
• Responsible gaming compliance. We use account activity data to identify patterns that may indicate problem gambling and to enforce deposit limits, self-exclusion periods, and time-out restrictions that you have elected to activate.
• Legal and regulatory compliance. Where required, we process identity and financial data to comply with anti-money laundering obligations, age verification requirements, and any information request lawfully submitted by a competent authority.
• Marketing communications (with consent). If you have opted in to marketing communications, we may use your contact data to send you promotional offers, bonus notifications, and news about new games or features on the tkfb platform. You may withdraw consent at any time.
• Platform security and technical operations. Technical data is used to monitor platform stability, investigate security incidents, prevent brute-force login attacks, and optimise the performance and availability of the tkfb platform for all players.
• Customer support. Communication data is used to investigate and resolve your support queries, to maintain a record of our correspondence, and to improve the quality of support we provide to all tkfb players.

3. Legal Basis for Processing

tkfb processes your personal data on the following legal bases depending on the processing activity involved. Where we rely on your consent, you retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

• Contractual necessity. The majority of data processing on the tkfb platform is necessary for the performance of the contract between you and tkfb — specifically, to provide you with account services, accept bets, process payments, and deliver game results.
• Legal obligation. Certain processing activities — in particular, identity verification, age checks, transaction monitoring, and the retention of financial records — are carried out to comply with applicable legal and regulatory obligations.
• Legitimate interests. We process technical and usage data to maintain platform security, prevent fraud, and improve our services. These activities are carried out on the basis of tkfb's legitimate interests, subject to your rights and freedoms as a data subject.
• Consent. Marketing communications, optional personalisation features, and non-essential cookies are processed on the basis of your freely given, specific, informed consent. You may withdraw consent at any time with no detriment to your account.

4. Data Sharing and Disclosure

tkfb does not sell personal data. We share personal data only where strictly necessary and only with parties who are contractually bound to process it in accordance with applicable data protection standards. The categories of third parties with whom we may share your data are described below.

• Payment service providers. We share necessary financial data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank solely to facilitate the processing of your deposit and withdrawal transactions. These providers operate under their own privacy policies and data security standards.
• Game technology providers. Game round data and account session tokens are shared with our game studio partners (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) to deliver game content and to verify game outcomes. These providers do not receive your identity or financial data.
• Identity verification services. Where enhanced identity verification is required, we may engage a third-party KYC (Know Your Customer) service to validate documents submitted by you. Such providers are bound by strict data processing agreements and may retain verification records only as long as legally required.
• IT infrastructure and cloud service providers. Data is hosted on secure cloud servers. Our infrastructure providers have no access to the content of your data and operate under robust data processing agreements.
• Law enforcement and regulatory authorities. tkfb will disclose personal data to a competent authority where required to do so by applicable law, by a court order, or where there is a credible suspicion of financial crime, fraud, or a serious risk of harm to a person.

5. Cookies and Tracking Technologies

tkfb uses cookies and similar client-side storage technologies to ensure the correct functioning of the platform, to remember your session state, and to collect aggregate analytics data. The table below describes the categories of cookies deployed on the tkfb platform.

tkfb does not deploy advertising cookies, social-media tracking pixels, or any cross-site tracking technology. Analytics data collected on the tkfb platform is not shared with advertising networks and is processed exclusively for internal platform improvement purposes.

You may configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies will impair your ability to log in and use core platform features. Instructions for managing cookies are available in your browser's help documentation (Chrome, Firefox, Edge, Safari).

6. Data Retention and Deletion

tkfb retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable legal and regulatory obligations. The retention periods applicable to each data category are set out below.

• Account and identity data. Retained for the duration of your account plus 5 years following account closure. This retention period reflects our obligation to maintain audit trails for anti-money laundering and fraud prevention purposes.
• Financial transaction records. Retained for 7 years from the date of each transaction in accordance with standard financial record-keeping requirements. These records include deposit amounts, withdrawal amounts, bonus adjustments, and game win/loss summaries.
• Customer support communications. Retained for 3 years from the date of last correspondence. Retaining support records allows tkfb to reference prior interactions when addressing repeat queries and to maintain accountability for support decisions.
• Responsible gaming records. Self-exclusion records and deposit limit histories are retained for 7 years from the date of closure of the relevant restriction. These records are essential for enforcing re-registration cooling-off periods.
• Technical and usage logs. Server access logs and session analytics data are retained for 90 days for security monitoring and debugging purposes, after which they are automatically purged or anonymised beyond recovery.
• Marketing consent records. Records of consent to marketing communications are retained for 3 years from the date of consent or until withdrawal, whichever is earlier. After consent is withdrawn, your contact details are removed from all active marketing lists within 48 hours.

7. Your Privacy Rights

As a tkfb account holder, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact the tkfb privacy team at the email address shown in the footer of this page. We will respond to all valid requests within 30 days of receipt.

• Right of access. You have the right to request a copy of the personal data tkfb holds about you, along with information about the purposes for which it is processed, the categories of data held, and the third parties with whom it has been shared.
• Right to rectification. If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic contact and preference data directly from your account settings page.
• Right to erasure. You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. Note that certain data must be retained by tkfb to meet legal obligations and cannot be deleted on request.
• Right to restriction of processing. You may request that tkfb restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing and tkfb is assessing whether its legitimate interests override your rights.
• Right to data portability. Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object. You have the right to object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object to processing based on legitimate interests, on grounds relating to your particular situation.
• Right to withdraw consent. Where processing is based on your consent, you may withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

8. Data Security Measures

tkfb implements a layered technical and organisational security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. The security measures in place include, but are not limited to, the following.

• Encryption in transit. All communications between your browser or mobile device and the tkfb platform are encrypted using TLS 1.2 or higher. Sensitive form fields — including login credentials and payment details — are additionally protected by end-to-end field-level encryption.
• Encryption at rest. Personal data stored in tkfb databases is encrypted at rest using AES-256 encryption. Database access is restricted to authorised personnel with a documented business need and is logged for audit purposes.
• Access controls. Internal access to personal data is governed by role-based access control (RBAC). Staff members are granted the minimum level of data access necessary to perform their role. Access privileges are reviewed quarterly and revoked immediately upon departure.
• Intrusion detection and monitoring. The tkfb platform infrastructure is monitored around the clock by automated security systems that detect and alert on anomalous traffic patterns, brute-force login attempts, and suspicious data access events.
• Password security. User passwords are hashed using a modern, computationally intensive hashing algorithm (bcrypt). Plain-text passwords are never stored or logged. tkfb staff cannot retrieve your password — only a reset is possible.
• Data breach response. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, tkfb will notify affected account holders without undue delay. The notification will describe the nature of the breach, the data categories affected, and the remedial steps taken.

9. Changes to This Privacy Policy

tkfb reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, updates to applicable law, or improvements to our platform. When material changes are made to this policy, tkfb will notify registered account holders via the email address on file no less than 7 days before the updated policy takes effect.

Minor or administrative updates — such as corrections to formatting, improved explanatory language, or updates to contact information — may be made without advance notification. The "Last Updated" date at the top of this page will reflect the date of the most recent revision.

Your continued use of the tkfb platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of and agreement to the revised terms. If you do not agree to the updated policy, you should discontinue use of the platform and contact support to request account closure in accordance with the procedure described in the tkfb Terms & Conditions.

10. Contact and Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which tkfb processes your personal data, please contact the tkfb privacy team using the details below. All privacy enquiries are handled with the same priority as account support requests.

For requests relating to the exercise of your data subject rights (access, erasure, rectification, portability, objection), please provide as much detail as possible about the specific data you are enquiring about and the right you wish to exercise. This will help us respond accurately and efficiently without unnecessary back-and-forth correspondence.

tkfb is committed to resolving all privacy complaints directly. If, however, you feel that your concern has not been adequately addressed after contacting us, you retain the right to escalate your complaint to a relevant data protection authority or consumer protection body in accordance with your applicable local laws.