tk366 Privacy Policy

1. Introduction

tk366 ("we", "us", "our") operates the online casino and sports betting platform accessible at tk366.one. This Privacy Policy sets out in clear, plain language how tk366 collects, uses, stores, shares, and protects the personal data of all registered members and visitors to the platform. By registering an account or using any part of the tk366 platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

This policy applies to data collected through the tk366 website, any associated mobile-optimised pages, and all communications between tk366 and its members. We encourage you to read this document carefully and contact our support team at [email protected] if you have any questions about how your information is used.

2. What Data We Collect

tk366 collects personal data through several distinct channels: directly from you during registration and ongoing account use, automatically through your interaction with the platform, and from third-party payment processors as part of deposit and withdrawal verification. The categories of data we collect are described below.

• Identity Data Full legal name, date of birth, and government-issued ID details provided during KYC verification.
• Contact Data Registered Bangladeshi mobile number (used as login identifier) and email address where provided.
• Financial Data Transaction records including deposit amounts, withdrawal requests, bKash/Nagad/Rocket wallet references, and account balance history. Full wallet account numbers are not stored by tk366.
• Usage Data Pages visited, games played, session durations, betting history, IP address, device type, and operating system — collected automatically via server logs and cookies.
• Communication Data Records of messages sent to our support team at [email protected], including the content of those messages and any attachments, for quality assurance and dispute resolution purposes.

3. How We Use Your Data

tk366 uses the personal data it collects strictly for the following lawful purposes. We do not use your data for any purpose not described in this Privacy Policy without first obtaining your explicit consent.

• Account creation and management: verifying your identity, setting up your account, processing deposits and withdrawals, and maintaining accurate account records.
• Service delivery: providing access to casino games, sports betting markets, live casino tables, crash games, and all other platform features.
• Security and fraud prevention: detecting and preventing fraudulent activity, money laundering, underage gambling, and unauthorised account access.
• Responsible gaming compliance: monitoring account activity to identify potential problem gambling behaviour and to action self-exclusion or deposit limit requests.
• Customer support: responding to enquiries, resolving disputes, and improving our service quality based on feedback received via [email protected].
• Marketing communications (opt-in only): sending promotional offers, bonus notifications, and platform updates to members who have explicitly opted into receiving marketing messages.

4. Legal Basis for Processing

tk366 processes personal data only where a valid legal basis exists. The legal grounds on which we rely are as follows.

• Contractual necessity: processing required to fulfil our obligations under the Terms & Conditions you agreed to at registration, including account management, payment processing, and service delivery.
• Legal obligation: processing necessary to comply with applicable anti-money-laundering laws, Know Your Customer obligations, age verification requirements, and any lawful request from competent authorities.
• Legitimate interests: processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided these interests are not overridden by your individual rights and freedoms.
• Consent: processing for optional marketing communications, where you have explicitly opted in. Consent may be withdrawn at any time without affecting prior lawful processing.

5. KYC and Identity Verification

tk366 is required to conduct identity verification (commonly referred to as Know Your Customer, or KYC) as part of its fraud prevention and responsible gaming obligations. KYC verification may be requested at registration or at any subsequent point where tk366 deems it necessary, including before processing withdrawal requests above standard thresholds.

KYC documents submitted to tk366 are used solely for verification purposes and are not shared with any third party except where required by law or as part of an active fraud or money-laundering investigation. Documents submitted are stored securely using encryption and are retained only for as long as required under applicable law or our data retention policy, whichever is longer.

• Accepted identity documents include: National ID Card (NID), passport, or birth certificate. For address verification: recent utility bill or bank statement issued within the last 3 months.
• Document images must be clear, unedited, and show all four corners. Edited, obscured, or low-resolution images will be rejected and may result in account suspension pending re-submission.
• If your KYC verification is unsuccessful, you will be notified by our support team with the reason for rejection and guidance on how to resubmit. tk366 will not process withdrawals until KYC verification is satisfactorily completed.

6. Cookies and Tracking Technologies

tk366 uses cookies and similar lightweight tracking technologies to ensure the platform functions correctly and to improve your experience. We do not use invasive advertising trackers or third-party retargeting pixels. The types of cookies we use are described below.

• Essential cookies: required for the platform to function. These include session cookies that keep you logged in during your visit, security cookies that protect against cross-site request forgery, and preference cookies that remember your language settings. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: lightweight, first-party cookies that record aggregated data about which pages are visited most frequently and how users navigate through the platform. This data is used solely to improve site performance and is never linked to individual identities.
• Functional cookies: cookies that enable enhanced platform features such as storing your preferred game categories, remembering your deposit method for faster checkout, and maintaining responsible gaming tool settings between sessions.

You may manage cookie preferences through your mobile browser settings. Disabling non-essential cookies will not prevent you from using the platform but may affect certain convenience features. tk366 does not use persistent advertising cookies or share cookie data with advertising networks.

7. Data Sharing and Disclosure

tk366 does not sell, rent, or trade your personal data. We share data only in the following strictly limited circumstances, and only to the minimum extent necessary for the purpose stated.

• Payment processors: transaction data is shared with bKash, Nagad, Rocket, and Upay solely to process deposits and withdrawals. These providers operate under their own privacy policies and are not authorised to use your data for any other purpose.
• Game providers: pseudonymised session data (no identity data) is shared with game providers such as Pragmatic Play, Evolution Gaming, Ezugi, and Spribe for the purpose of game delivery, RNG certification, and fair-play auditing.
• Legal and regulatory authorities: where tk366 is legally required or compelled by a court order or competent authority to disclose personal data, we will comply with such obligations. We will, where lawfully permitted, notify the affected member before disclosing their data.
• Business transfers: in the event of a merger, acquisition, or sale of all or a material part of tk366's business assets, member data may be transferred as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data post-transfer.

8. Data Retention

tk366 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide, subject to any longer period required by law.

• Active account data: retained for the full duration of your membership with tk366 plus a minimum of 5 years following account closure, to comply with anti-money-laundering record-keeping requirements.
• KYC documents: retained for a minimum of 5 years from the date of submission or from account closure, whichever is later, as required by applicable identity verification and financial record-keeping obligations.
• Support communications: records of support emails sent to [email protected] are retained for 2 years from the date of the most recent communication in any given thread, after which they are securely deleted.

9. Your Data Rights

As a member of the tk366 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 2 hours and respond substantively within 7 working days.

• Right of access: you may request a copy of all personal data tk366 holds about you, including account information, transaction history, and any KYC documents on file.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Please note that changes to identity data will require re-verification via KYC documentation.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to tk366's legal obligations to retain certain data under applicable law (e.g. anti-money-laundering record-keeping requirements).
• Right to restrict processing: you may request that tk366 temporarily suspend processing of your data while a rectification or erasure request is being reviewed, or where you contest the accuracy of your data.
• Right to withdraw marketing consent: you may opt out of promotional communications at any time by contacting [email protected]. Essential service messages (e.g. withdrawal confirmations, security alerts) are not affected by marketing opt-out.

tk366 will not charge any fee for handling a data rights request. We may request reasonable proof of identity before processing a request to protect against unauthorised access to another person's data.

10. Data Security

tk366 takes the security of your personal data seriously and implements industry-standard technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and our servers, password hashing using secure cryptographic algorithms, restricted access controls so that only authorised staff can access member data on a need-to-know basis, and regular security reviews of our platform infrastructure.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, tk366 will notify affected members without undue delay and will take immediate steps to contain and remediate the breach. If you believe your account has been compromised, please contact [email protected] immediately.

11. Third-Party Links and Services

The tk366 platform integrates with third-party game providers (such as Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, and Spribe) and payment services (bKash, Nagad, Rocket, Upay) to deliver its core functionality. When you interact with these integrated services, your data may be processed by those providers under their own privacy policies. tk366 is not responsible for the privacy practices of third-party providers. We recommend reviewing the privacy policies of any third-party service you use in connection with your tk366 account.

12. Children's Privacy and Underage Protection

The tk366 platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. If tk366 discovers or has reasonable grounds to believe that personal data has been collected from an underage individual, that data will be deleted immediately and the associated account will be permanently closed without compensation.

13. Changes to This Privacy Policy

tk366 reserves the right to update this Privacy Policy at any time. Where material changes are made — for example, changes to how we use your data, who we share it with, or how long we retain it — we will notify registered members via a prominent notice on the platform or by message to their registered mobile number, at least 7 days before the change takes effect where practicable.

The "Last updated" date at the top of this page will always reflect the most recent revision. Your continued use of the tk366 platform after the effective date of any change constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised policy, you must cease using the platform and contact [email protected] to close your account.

14. Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way tk366 handles your personal data, please contact our support team in writing by email. We are committed to resolving all privacy enquiries promptly, fairly, and transparently.

Our team will acknowledge all privacy-related emails within 2 hours and provide a full response within 7 working days. For urgent data security concerns (e.g. suspected account compromise), please mark your email subject line as "URGENT — Security" and we will prioritise your request.