Privacy Policy

1 Introduction

tk9991 ("we", "us", "our") operates the online casino and sports betting platform accessible at tk9991.biz (the "Platform"). We are committed to protecting the personal data of every individual who visits, registers on, or interacts with our Platform. This Privacy Policy sets out in clear terms how we handle your personal information in compliance with applicable data protection principles.

This Privacy Policy applies to all personal data collected through the tk9991 Platform, including data submitted during registration, data generated through your use of Platform services, data provided when contacting our customer support team, and data collected automatically via cookies and similar technologies.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference. By creating an Account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2 Data We Collect

tk9991 collects several categories of personal data. The specific data collected depends on how you interact with the Platform. The categories are described below:

We do not collect or process sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity document verification purposes.

3 How We Collect Your Data

tk9991 collects personal data through the following methods:

• Direct submission: Data you provide voluntarily when registering an Account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or updating your Account profile.
• Automated technologies: Data collected automatically when you access and interact with the Platform, including IP address, device identifiers, browser information, session duration, and gameplay activity, collected via server logs, cookies, and similar tracking technologies.
• Third-party payment processors: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a Bangladeshi bank, the relevant payment processor may share transaction confirmation data with us to facilitate Account crediting and withdrawal processing.
• Identity verification providers: Where we use a third-party KYC or document verification service to assist in confirming your identity, that provider may return verification results and associated data to us.
• Fraud prevention and security services: We may receive data from third-party fraud detection services that help us identify suspicious activity, irregular betting patterns, or potentially compromised Account access.

4 Purpose of Processing

We process your personal data only for specific, legitimate purposes. The table below sets out the primary purposes for which we use each category of data:

• Account creation and management: Identity Data and Contact Data are used to create, maintain, and administer your Player Account, including enabling login access, recovering lost credentials, and communicating Account status updates.
• KYC and age verification: Identity Data and Identity Document Data are used to verify that you meet the minimum age requirement (18 years) and to confirm your identity before processing withdrawal requests, as required for responsible gaming compliance.
• Payment processing: Financial Data and Transaction Data are used to process deposits and withdrawals, reconcile account balances, detect and prevent payment fraud, and maintain accurate financial records.
• Platform security and fraud prevention: Technical Data, Usage Data, and Financial Data are used to monitor for suspicious activity, detect unauthorised Account access, identify potential multi-accounting, and investigate suspected breaches of our Terms & Conditions.
• Responsible gaming monitoring: Usage Data, Transaction Data, and Responsible Gaming Data are used to monitor player behaviour for signs of problem gambling, enforce self-imposed limits and exclusions, and proactively contact Players who show indicators of at-risk behaviour.
• Customer support: Identity Data, Contact Data, and Communication Data are used to respond to your support enquiries, resolve disputes, process complaints, and maintain a record of support interactions for quality assurance purposes.
• Platform improvement and analytics: Usage Data and Technical Data are used in aggregated, anonymised form to understand how Players interact with the Platform, identify technical issues, and improve the overall user experience.
• Marketing communications: Contact Data and Usage Data may be used to send you promotional offers, bonus notifications, and platform news. You may opt out of marketing communications at any time via your Account settings or by contacting [email protected].
• Legal and regulatory compliance: All categories of data may be processed as necessary to comply with applicable legal obligations, respond to lawful requests from regulatory or law enforcement authorities, and defend or prosecute legal claims.

5 Legal Basis for Processing

tk9991 processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to at registration — including Account management, payment processing, game provision, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including age verification requirements, anti-money-laundering obligations, and responses to lawful regulatory or law enforcement enquiries.
• Legitimate interests: Processing carried out for our legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, responsible gaming monitoring, and anonymised analytics for platform improvement.
• Consent: Processing for marketing communications and non-essential cookies, where we rely on your explicit consent. You may withdraw your consent at any time; withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

6 Data Sharing & Disclosure

tk9991 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share personal data only in the following limited and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other payment partners receive the minimum data necessary to process your deposit or withdrawal transaction. These partners are contractually bound to use your data only for the purposes of transaction facilitation.
• Identity verification providers: Third-party KYC service providers may receive copies of your identity documents and personal details for the sole purpose of completing identity and age verification checks. They are prohibited from retaining or using your data for any other purpose.
• Fraud prevention and security providers: We may share Technical Data and account activity data with specialist fraud prevention services that help us identify and block fraudulent activity on the Platform.
• IT and hosting providers: Our hosting infrastructure and technical operations partners may process personal data as data processors on our behalf, subject to strict data processing agreements and security obligations.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, or when we reasonably believe that such disclosure is necessary to protect the rights, property, or safety of tk9991, our Players, or the public.
• Business transfers: In the event of a merger, acquisition, or transfer of some or all of tk9991's business or assets, personal data held by tk9991 may form part of the transferred assets. Affected Players will be notified in advance of any such transfer.

7 Data Retention

tk9991 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account data: Retained for the full duration of your Account's existence on the Platform, plus a minimum post-closure period of five years to fulfil financial record-keeping and anti-money-laundering obligations.
• KYC and identity documents: Retained for a minimum of five years following Account closure, in compliance with applicable financial regulation requirements.
• Transaction records: Retained for a minimum of five years from the date of the transaction, or longer if required by applicable law or an ongoing legal matter.
• Customer support communications: Retained for a period of three years from the date of the interaction, unless the matter has given rise to an ongoing complaint or legal proceeding.
• Technical and usage logs: Retained for a rolling period of twelve months, after which they are anonymised or deleted.
• Marketing consent records: Retained until you withdraw consent, plus an additional twelve-month period to demonstrate compliance with consent management obligations.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. If you request erasure of your data and no legal obligation requires continued retention, we will action the erasure within 30 days of your request.

8 Data Security

tk9991 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it from unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and the tk9991 Platform, ensuring that your login credentials, financial details, and personal information cannot be intercepted during transmission.
• Encrypted data storage for all sensitive personal data and financial records at rest, using industry-standard encryption protocols.
• Access controls limiting access to personal data to authorised personnel only, on a strict need-to-know basis. All staff with access to personal data are trained in data protection obligations and are bound by confidentiality agreements.
• Regular security assessments including penetration testing, vulnerability scanning, and security code reviews conducted periodically to identify and remediate potential weaknesses in the Platform's security architecture.
• Intrusion detection systems that monitor the Platform infrastructure in real time for signs of unauthorised access attempts, unusual traffic patterns, or potential data breach activity.
• Secure data centres with physical access controls, fire suppression, redundant power, and environmental monitoring, ensuring the availability and integrity of data at rest.

While tk9991 implements strong security practices, no online platform can guarantee absolute security against all possible threats. You are also responsible for maintaining the security of your Account by using a strong, unique password, not sharing your login credentials, and logging out of the Platform when accessing it from shared or public devices. If you suspect your Account has been compromised, contact us immediately at [email protected].

9 Cookies & Tracking Technologies

tk9991 uses cookies and similar tracking technologies to operate the Platform, personalise your experience, analyse usage patterns, and support security and fraud prevention. A cookie is a small text file placed on your device when you visit the Platform. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function. These cookies enable core functions such as session management, login authentication, and security verification. They cannot be disabled without rendering the Platform non-functional.
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and display options, allowing us to provide a more personalised experience on return visits.
• Analytics cookies: Collect anonymised data about how Players navigate and interact with the Platform — including which pages are most visited, how long sessions last, and where Players encounter errors. This data is used exclusively for internal Platform improvement.
• Security cookies: Support fraud detection and security monitoring functions by tracking session identifiers, device fingerprints, and unusual access patterns that may indicate account compromise attempts.

You may manage cookie preferences through your browser settings. Most browsers allow you to refuse some or all cookies, or to alert you when a cookie is being set. Please note that disabling strictly necessary cookies will affect your ability to use core Platform functions, including login and game access.

tk9991 does not use third-party advertising cookies or retargeting pixels. We do not share cookie-derived data with external advertising networks.

10 Your Rights

As a Player whose personal data is processed by tk9991, you hold the following rights with respect to your personal information. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request":

• Right of access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed. We will respond to access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. Most contact details can be updated directly via your Account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing and we have no overriding legitimate interests. Note that certain data must be retained for legal and regulatory compliance reasons even after Account closure.
• Right to restriction of processing: You may request that we restrict processing of your personal data in certain circumstances — for example, while a rectification request is under review, or while you contest the grounds on which we are processing your data.
• Right to data portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that we transmit it directly to another controller where technically feasible.
• Right to object: You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

11 Children's Privacy

The tk9991 Platform is strictly intended for adults aged 18 years and above. We do not knowingly collect, process, or retain personal data relating to individuals under the age of 18.

If we become aware or have reasonable grounds to suspect that a Person under 18 has registered an Account or submitted personal data to the Platform, we will immediately suspend the Account, delete the associated personal data as soon as practicable, and return any deposited funds in accordance with our standard procedures. Age verification is conducted at registration and again prior to the processing of any withdrawal request.

We strongly encourage parents and guardians to use parental control software to prevent minors from accessing online gambling platforms. For guidance on parental controls and responsible gaming tools, please visit our Responsible Gaming page.

12 Third-Party Links

The tk9991 Platform may contain references to or contextual mentions of third-party services such as payment processors (bKash, Nagad, Rocket, Upay) and game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). Where links to third-party websites or applications are present, please be aware that those third parties operate independently from tk9991 and have their own privacy policies governing how they collect and process personal data.

tk9991 has no control over, and accepts no responsibility for, the privacy practices, content, or data processing activities of any third-party website or service. We encourage you to review the privacy policy of any third-party service before providing them with your personal information. The presence of a reference to a third-party provider on the tk9991 Platform does not constitute an endorsement of that provider's privacy practices.

13 Updates to This Privacy Policy

tk9991 reviews this Privacy Policy periodically and reserves the right to update or amend it at any time. Where we make material changes to this Privacy Policy — changes that significantly affect your rights or how we process your data — we will notify registered Players by email to their registered address and by posting a prominent notice on the Platform no less than 14 days before the changes take effect.

Non-material changes, such as typographical corrections, clarifications that do not alter the substance of existing provisions, or updates to contact details, may be made without prior notice. The "Effective Date" displayed at the top of this document will always reflect the date of the most recent revision.

Your continued use of the Platform following the effective date of any revision to this Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Privacy Policy, you should close your Account and cease using the Platform before the effective date of the change.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by tk9991, please contact our support team using the details below. All data-related enquiries are handled by our dedicated data protection team and will be acknowledged within 48 hours.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data rights requests: "Data Rights Request — [Your Registered Name]"
• Subject line for general privacy enquiries: "Privacy Policy Enquiry"
• Live Chat: Available 24/7 via your Account dashboard after login
• Response time: Within 48 hours for email; within 5 minutes via live chat
• Operating hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)