tk223 Privacy Policy — Your Data, Your Rights

Last updated: January 2026

tk223 operates as an online casino and sports betting platform serving adult players in Bangladesh. As part of delivering our service, maintaining account security, complying with anti-fraud and anti-money-laundering obligations, and improving the player experience, we process certain categories of personal data. This policy describes those categories, the lawful basis for processing them, and your rights as a data subject.

We are committed to handling all personal data with care, transparency, and respect for your privacy. We do not sell your personal data to third parties, and we do not use it for any purpose unrelated to operating the tk223 platform and delivering the services you have requested from us.

1. Information We Collect

When you register an account, use the platform, or contact our support team, we may collect the following categories of personal information:

• Identity information: your full name, date of birth, and gender as provided at the time of account registration. This information is used to verify your age eligibility (21+), prevent duplicate accounts, and comply with KYC requirements.
• Contact information: your Bangladesh mobile phone number and, if provided, an email address. These are used for account notifications, transaction confirmations, support communications, and responsible gaming alerts.
• Financial information: details of the payment methods you use to deposit and withdraw, including your bKash or Nagad mobile wallet number, Rocket or Upay account details, or Visa/Mastercard card details (last four digits and card type only — full card numbers are never stored on our servers). This information is required to process transactions and satisfy anti-money-laundering obligations.
• Technical and usage data: your IP address, device type, operating system, browser type, session duration, pages visited, bet history, game activity logs, and deposit and withdrawal history. This data is collected automatically when you use the platform and is used for fraud detection, security monitoring, platform optimisation, and dispute resolution.
• Support and communications data: records of your interactions with our customer support team, including live chat transcripts, support ticket content, and any documentation you submit for identity or payment verification purposes. We retain these records to maintain a full history of account management actions and to resolve any future disputes.

We collect only the personal data that is necessary for the purposes described in this policy. We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or political opinions. We do not process biometric data.

2. How We Use Your Information

Your personal data is used solely for the following lawful purposes related to operating the tk223 platform and delivering our services to you:

• Account management: to create, maintain, and administer your tk223 player account, including processing your registration, verifying your identity for KYC compliance, and managing your account settings and preferences.
• Transaction processing: to process your deposits via bKash, Nagad, Rocket, Upay, Visa or Mastercard; to process your withdrawal requests; to maintain accurate financial records; and to verify that payment method ownership matches the registered account holder.
• Platform security and fraud prevention: to monitor account activity for signs of suspicious behaviour, unauthorised access, collusion, bonus abuse, or money laundering. Our security team uses automated systems and manual review to protect both the platform and legitimate players from bad actors.
• Customer support: to respond to your support requests, investigate disputes, resolve complaints, and keep a record of account management actions taken at your request or at tk223's initiative where account security or regulatory compliance requires it.
• Responsible gaming monitoring: to track deposit volumes, session lengths, and betting patterns in order to identify early indicators of potentially harmful gambling behaviour and to make responsible gaming tools available proactively where player welfare may be at risk.

Our Privacy Principles

3. Sharing Your Information

tk223 does not sell your personal data. We may share specific categories of your data with the following categories of third party only where it is strictly necessary to deliver our services or comply with legal obligations:

• Payment processors: your transaction data is shared with bKash, Nagad, Rocket, Upay, and card payment processors solely to process your deposit and withdrawal requests. These providers process data under their own privacy policies and are bound by financial sector data protection standards.
• Game providers: where required to support a specific game session, limited technical identifiers (such as a session token or anonymised player reference) may be passed to game providers such as Pragmatic Play, Evolution Gaming, Spribe, or Ezugi. Full personal data is never passed to game providers.
• Law enforcement and regulatory authorities: where tk223 is legally required to disclose personal data in response to a valid legal request, court order, or regulatory investigation, we will comply with the applicable legal obligation. We will notify you of any such disclosure where we are legally permitted to do so.

4. Cookies and Tracking Technologies

tk223 uses cookies and similar local storage technologies to support platform functionality, maintain your login session, and collect technical usage data as described in Section 1 above. The types of cookies we use include:

• Essential cookies: required for core platform functionality, including keeping you logged in during an active session, remembering your language preference, and maintaining your game state. These cookies cannot be disabled without impairing your ability to use the platform.
• Analytics cookies: used to understand how players interact with the platform, which pages are visited most frequently, and where technical issues may be occurring. This data is aggregated and anonymised for internal analysis purposes only and is not used to identify individual players.
• Security cookies: used to detect and prevent fraudulent activity, credential stuffing, and automated bot access. These cookies form part of our active security infrastructure and cannot be disabled without significantly reducing account protection for all players.

tk223 does not use third-party advertising cookies or tracking pixels. We do not participate in cross-site behavioural advertising networks. You can manage cookie preferences through your mobile browser settings; however, disabling essential or security cookies will impair your use of the platform.

5. Data Retention

tk223 retains your personal data for as long as your account is active and for a reasonable period thereafter to allow for dispute resolution, regulatory audit, and compliance with any applicable legal retention obligations. Specifically: account registration data and KYC documentation are retained for a minimum of five years following account closure; transaction records are retained for a minimum of five years; support interaction records are retained for three years.

When data is no longer required for any lawful purpose, it is securely deleted or anonymised in accordance with our internal data lifecycle policy. You may request early deletion of non-essential data by contacting our support team; however, deletion requests that would conflict with active legal retention obligations will not be actioned until those obligations expire.

6. Your Rights Over Your Personal Data

As a player registered with tk223, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line 'Data Rights Request':

• Right of access: you may request a copy of all personal data we hold about you. We will respond within 30 days of receiving a valid request.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update basic account details directly through your account settings panel.
• Right to erasure: you may request deletion of your personal data and account. We will action this request where there is no overriding legal obligation to retain the data. Certain transaction and KYC records will be retained for the legally required minimum period even after account closure.
• Right to restrict processing: in certain circumstances you may request that we limit how we use your personal data — for example, while the accuracy of certain data is under dispute, or where you have objected to processing and we are considering your objection.
• Right to object: you have the right to object to our processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, though we may be entitled to continue processing if we can demonstrate compelling legitimate grounds.

To exercise any of the above rights, email [email protected] with your registered mobile number and the specific right you wish to exercise. We will acknowledge your request within 5 business days and respond fully within 30 calendar days. Identity verification will be required before we can action any data rights request.

7. Security Measures

tk223 implements a layered approach to data security. All data transmitted between your device and our servers is encrypted using SSL/TLS protocols. Sensitive data fields, including payment method details and identity documents, are encrypted at rest using industry-standard encryption algorithms. Access to personal data within tk223's internal systems is restricted on a strict need-to-know basis, with role-based access controls and audit logging applied to all data access events.

While we implement robust security measures, no online platform can guarantee absolute security against all possible threats. You are responsible for keeping your account credentials confidential and for logging out of shared or public devices after each session. If you suspect your account has been accessed without your authorisation, contact our support team immediately at [email protected].

8. Minors and Age Verification

9. Changes to This Privacy Policy

tk223 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will post the updated policy on this page and update the 'Last updated' date at the top. Where the changes significantly affect how we process your personal data, we will make reasonable efforts to notify you via your registered contact details. Your continued use of the platform after any updated Privacy Policy is posted constitutes your acceptance of the revised terms. We encourage you to review this page periodically.

10. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to how tk223 processes your personal data, please contact our support team. We aim to respond to all privacy-related enquiries within 5 business days.

Email: [email protected]