tk566 Privacy Policy — How We Handle Your Personal Data

This Privacy Policy applies to all personal data collected and processed by tk566 ("the Platform", "we", "us", "our") through the website https://tk566.onl and any associated mobile-optimised interfaces. It describes how tk566 handles the personal information of registered players, visitors, and prospective players based primarily in Bangladesh.

By accessing the tk566 platform, creating an account, or submitting any personal information to us, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this policy, you should not use the platform.

tk566 takes its data protection responsibilities seriously. We maintain robust technical and organisational measures to safeguard your personal information and process it only where we have a lawful and legitimate basis to do so.

tk566 collects two broad categories of personal data: information you provide directly to us, and information we collect automatically as you use the platform.

Information you provide directly:

• Identity data: Full legal name, date of birth, gender, and National Identity Card (NID) number or passport number provided during registration or KYC verification.
• Contact data: Bangladesh mobile number, residential address (including district, division, and postal code), and email address where provided.
• Financial data: Mobile financial service account identifiers (bKash, Nagad, Rocket, Upay wallet numbers), bank account details where provided for direct bank transfer, and transactional history on the platform.
• Account data: Username, encrypted password, account preferences, communication opt-in/opt-out status, and responsible gaming settings.
• Communications data: Content of messages submitted through the support channel at [email protected], including any documentation attached for verification purposes.

Information collected automatically:

• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and time zone.
• Usage data: Pages visited, games played, bet histories, session durations, click patterns, and navigation paths within the platform.
• Cookie and tracking data: As described in Section 7 of this policy.

tk566 does not collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information) except where directly relevant to a responsible gaming assessment and only with your explicit consent.

tk566 collects personal data through the following channels:

• Direct registration: When you create a tk566 account, you provide identity and contact data voluntarily. This data is required to open and maintain an account in good standing.
• KYC verification process: When tk566 requests documentary verification (NID, passport, proof of address), you upload or submit documents directly. These documents and the data extracted from them are retained as part of your verification record.
• Deposit and withdrawal transactions: Financial data relating to payment methods is collected each time you initiate a deposit or request a withdrawal on the platform.
• Platform activity: As you browse, bet, and play on tk566, usage and technical data are collected automatically through our platform infrastructure and analytics systems.
• Support interactions: When you contact tk566 via [email protected], any personal information included in your message is collected and retained as part of the support record.
• Cookies and similar technologies: As described in Section 7, tk566 uses cookies and similar tracking technologies to collect technical and usage data automatically as you interact with the platform.

The following table summarises the primary purposes for which tk566 processes personal data and the categories of data involved in each processing activity:

tk566 does not use personal data to make fully automated decisions that produce significant legal effects on players without human review. Where automated systems flag an account for review (for example, an AML risk flag), a member of the tk566 compliance team will conduct a manual review before any account action is taken.

tk566 processes personal data only where a lawful basis exists. The following legal bases apply to our processing activities:

• Contractual necessity: Processing required to create and manage your account, verify your identity, process payments, and deliver platform services. Without this processing, tk566 cannot provide the services you have requested.
• Legal obligation: Processing required to comply with anti-money-laundering regulations, age verification obligations, and any other applicable legal requirements. This processing is non-negotiable and cannot be opted out of.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, analytics, and platform improvement. tk566 has carried out legitimate interest assessments to confirm that these interests are not overridden by your rights and freedoms.
• Consent: Processing for optional activities such as sending promotional communications, depositing cookies beyond those strictly necessary, and conducting optional player satisfaction surveys. Where consent is the basis, you may withdraw it at any time by contacting [email protected] or adjusting your account communication preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

tk566 does not sell, rent, or trade your personal data to third parties. We share personal data with external parties only in the following defined circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, and banking partners receive the minimum financial data necessary to process deposit and withdrawal transactions. These providers operate under their own privacy policies and are independently regulated.
• Identity verification and KYC providers: Where third-party identity verification services are used to assist with KYC processing, data is shared under strict data processing agreements that prohibit use of the data for any purpose other than identity verification.
• Game content providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive pseudonymised session and wagering data necessary to deliver their games. These providers do not receive directly identifying data such as your full name or NID number.
• Fraud prevention and AML services: Specialist third-party fraud detection and anti-money-laundering screening services may process identity and transactional data on our behalf under data processing agreements.
• Legal and regulatory disclosure: tk566 may disclose personal data to law enforcement, regulatory bodies, or other authorities where required to do so by applicable law, court order, or legal process. We will notify you of any such disclosure where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the tk566 platform, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and given the opportunity to close their accounts before it takes effect.

tk566 uses cookies and similar technologies (including local storage and session storage) on the platform. These technologies serve the following purposes:

• Strictly necessary cookies: Required for core platform functionality including maintaining your logged-in session, remembering your account preferences, and enabling secure payment flows. These cookies cannot be disabled without impairing your use of the platform.
• Analytics cookies: Used to collect anonymised or pseudonymised data about how players navigate and use the platform. This data helps tk566 identify performance issues, understand popular features, and improve the overall user experience. Analytics cookies are only set with your consent.
• Fraud prevention tokens: Short-lived session identifiers used by our fraud detection systems to identify suspicious access patterns. These are strictly necessary for platform security.

tk566 does not use third-party advertising cookies or behavioural advertising tracking technologies. We do not participate in programmatic advertising networks or retargeting campaigns that rely on cross-site tracking of player behaviour.

Most browsers allow you to manage cookie preferences through their settings. Blocking strictly necessary cookies will impair platform functionality. You may opt out of analytics cookies at any time by adjusting your account communication preferences or contacting [email protected].

tk566 implements a layered security architecture to protect player personal data against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational security measures include:

• Encryption in transit: All data transmitted between your device and the tk566 platform is encrypted using TLS 1.2 or higher (HTTPS). The tk566 platform enforces HTTPS on all pages with no unencrypted fallback.
• Encryption at rest: Sensitive personal data fields — including identity numbers, financial account identifiers, and passwords — are encrypted at rest using AES-256 encryption. Passwords are stored as salted hashes and are never stored in plain text.
• Access controls: Access to player personal data within tk566's internal systems is restricted to authorised personnel on a strict need-to-know basis. Role-based access controls and multi-factor authentication are required for all staff accessing production systems.
• Security monitoring: tk566's infrastructure is subject to continuous automated security monitoring. Anomalous access patterns and potential intrusion attempts are flagged and investigated by our security team.
• Penetration testing: tk566 conducts periodic security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to player rights and freedoms, tk566 will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach.

tk566 retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of the account relationship and for a period of 5 years following account closure, to satisfy anti-money-laundering record-keeping requirements.
• KYC and identity documents: Retained for a minimum of 5 years from the date of the player's last transaction, in compliance with AML regulations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Support communications: Retained for 2 years from the date of the last interaction, unless the communication relates to an ongoing dispute or legal matter, in which case it is retained until resolution.
• Analytics and usage data: Anonymised within 12 months of collection. Pseudonymised usage data may be retained for up to 2 years for platform improvement purposes.
• Cookie and session data: Strictly necessary session cookies expire at the end of each browsing session. Analytics cookies expire within 12 months of placement.

When the applicable retention period expires, personal data is either securely deleted, anonymised so that it can no longer be attributed to an identifiable individual, or archived where an ongoing legal obligation requires retention.

As a tk566 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered account username and mobile number for verification purposes.

• Right of access: You may request a copy of the personal data tk566 holds about you. We will provide this within 30 days of receiving a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. Minor corrections (such as updating a contact number) can be made directly in your account settings.
• Right to erasure: You may request that tk566 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where you object to processing based on legitimate interests and there are no overriding legitimate grounds to continue. Note that certain data — particularly KYC and transaction records — must be retained for statutory periods and cannot be erased on request.
• Right to restriction: You may request that tk566 restrict the processing of your personal data in specific circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object at any time to processing based on legitimate interests (including profiling for fraud prevention) and to processing for direct marketing purposes. We will cease processing for direct marketing immediately upon receiving your objection. For other legitimate interest-based processing, we will assess whether our compelling legitimate grounds override your interests.

The tk566 platform is strictly for adults aged 21 years and above. tk566 does not knowingly collect, process, or retain personal data from persons under the age of 21. If tk566 becomes aware that personal data has been submitted by or on behalf of a person under 21, that data will be deleted immediately and the associated account will be permanently closed.

Parents and legal guardians who believe that a minor may have registered on the tk566 platform should contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and close the account within 24 hours of a verified report. tk566 encourages all households with minors to implement parental control and content filtering software on shared devices.

tk566 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made — particularly changes that affect the legal basis for processing, the categories of data we collect, or the third parties with whom we share data — tk566 will notify registered players via the email address on file at least 14 days before the changes take effect.

Non-material changes, such as typographical corrections, clarifications that do not alter the substance of any provision, or updates to contact information, may take effect immediately upon publication. The "Effective Date" shown at the top of this page reflects the date of the most recent published version. We encourage you to review this Privacy Policy periodically to remain informed of how your data is being processed.

Continued use of the tk566 platform after any updated Privacy Policy takes effect constitutes your acceptance of the revised policy. If you do not agree with the updated terms, you should close your account by contacting [email protected] before the effective date of the changes.

If you have any questions, concerns, or formal complaints regarding this Privacy Policy or the way tk566 processes your personal data, please contact us using the details below. All privacy-related communications must be submitted in English.

If you are not satisfied with tk566's response to a privacy complaint, you may have the right to escalate your complaint to an appropriate data protection authority or seek legal remedy through the courts. tk566 will cooperate fully with any such process and provide all relevant information to facilitate resolution.