tkbd Privacy Policy

This Privacy Policy describes how tkbd, the operator of the online betting and gaming platform available at tkbd.io ("tkbd", "we", "us", or "our"), collects, processes, stores, and protects the personal data of individuals who visit or use the platform ("you" or "the player"). This policy applies to all users of tkbd.io, including registered account holders and unregistered visitors.

tkbd is committed to protecting your personal data and complying with applicable data protection principles. We process personal data only for legitimate, specified, and clearly communicated purposes, and we retain it only for as long as is necessary to fulfil those purposes or to meet our legal and regulatory obligations.

By accessing tkbd.io or registering an account on the platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Privacy Policy, you must not use the platform.

This Privacy Policy should be read alongside the tkbd Terms and Conditions and Responsible Gaming Policy, both of which are available on the tkbd website and are incorporated by reference.

tkbd collects personal data in the following categories, depending on how you interact with the platform:

We do not collect or store full card numbers, CVV codes, or complete bank account credentials. Payment transactions via Visa and Mastercard are processed by certified payment service providers who handle cardholder data in accordance with PCI DSS standards. tkbd receives only a tokenised reference and the transaction outcome.

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, biometric data, or health data, except where such data is voluntarily disclosed by the player in the context of a responsible gaming self-assessment or support request, in which case it is handled with the utmost care and is never used for marketing purposes.

tkbd uses the personal data it collects for the following purposes:

• Account management: To create, maintain, and administer your tkbd account, verify your identity, process your login sessions, and communicate important account-related information to you.
• Payment processing: To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), reconcile transactions, and maintain accurate financial records.
• Age and identity verification: To verify that you are aged 21 or above and that you are who you claim to be, as required by our responsible gaming obligations and anti-money laundering (AML) compliance framework.
• Platform operation and personalisation: To deliver the betting and gaming services you request, record your game history, calculate winnings and bonus eligibility, and personalise your experience based on your preferences and activity.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and any other conduct that violates our Terms and Conditions or applicable law.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and maintain a record of your interactions with the tkbd support team.
• Responsible gaming: To monitor your gaming patterns for signs of problem gambling, apply self-exclusion requests, enforce deposit and time limits, and provide you with responsible gaming information and tools.
• Legal and regulatory compliance: To fulfil our obligations under applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and maintain records as required by our licensing conditions.
• Marketing communications: Where you have opted in, to send you promotional offers, bonus notifications, tournament announcements, and other marketing materials via email or SMS. You may opt out at any time through your account settings or by contacting support.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the features, performance, and user experience of the tkbd platform.

tkbd will never use your personal data for any purpose that is incompatible with those listed above without first notifying you and, where required, obtaining your explicit consent.

tkbd processes your personal data on the following legal bases:

• Contractual necessity: Processing your identity, contact, and financial data is necessary to enter into and perform the contract between you and tkbd — that is, to operate your account and deliver the services you have signed up for.
• Legitimate interests: tkbd has a legitimate interest in preventing fraud, detecting multi-accounting, securing the platform, and improving its services. We balance this interest against your rights and will not allow our legitimate interests to override your fundamental privacy rights.
• Legal obligation: Certain processing activities — particularly those related to age verification, AML compliance, and record-keeping — are required by applicable law and licensing conditions. tkbd must conduct these activities regardless of your individual preferences.
• Consent: Where processing is not otherwise justified by the above bases — particularly in relation to optional marketing communications — tkbd will rely on your freely given, specific, and informed consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before your withdrawal.

tkbd uses cookies and similar tracking technologies on the tkbd.io website. Cookies are small text files placed on your device by your browser when you visit the platform. They serve several important functions:

• Essential cookies: Required for the platform to function correctly. These include session cookies that maintain your login state, security tokens, and load-balancing identifiers. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Store your preferences such as language settings, preferred payment method, and display options so that they are retained between sessions.
• Analytical cookies: Collect anonymised data about how players navigate and use the platform, which pages are most visited, and where users encounter errors. This data is used solely to improve platform performance and user experience.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and suspicious session behaviour.

tkbd does not use third-party advertising cookies or allow external ad networks to place tracking cookies on the tkbd.io domain. Your browsing activity on tkbd is not shared with social media platforms or advertising exchanges.

You can manage or delete cookies at any time through your browser settings. Note that disabling essential cookies will prevent you from logging into your account or using core platform features. Your cookie preferences for non-essential cookies can be updated in your account settings at any time.

tkbd may share your personal data with the following categories of third parties, and only to the extent necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, and card processing partners receive the minimum data necessary to process your transactions. These providers are contractually bound to handle your data securely and in accordance with applicable data protection standards.
• Identity and age verification services: Specialist KYC providers may receive copies of your identity documents and date of birth for the purpose of verifying your eligibility to use the platform. All KYC providers used by tkbd operate under strict data processing agreements.
• Game software providers: Game studios and RNG certification bodies (such as Pragmatic Play, Evolution Gaming, Spribe, and similar) may receive anonymised session identifiers necessary to deliver game content and record round outcomes. They do not receive your full identity or financial data.
• Fraud prevention and AML services: Specialist screening tools may receive limited identity and transaction data to check against watchlists and detect suspicious activity patterns.
• Legal and regulatory authorities: tkbd will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by law, court order, or in connection with the prevention or detection of serious crime.
• Professional advisers: Lawyers, accountants, auditors, and insurers engaged by tkbd may access personal data to the extent necessary to provide their professional services, subject to confidentiality obligations.

As an offshore-licensed gaming operator, tkbd operates infrastructure and engages service providers across multiple jurisdictions. Your personal data may therefore be transferred to, and processed in, countries outside Bangladesh. In each such case, tkbd takes steps to ensure that your data receives a level of protection that is at least equivalent to the protections afforded in Bangladesh.

Measures used to safeguard international data transfers include contractual data processing agreements with all third-party recipients that impose data protection obligations consistent with this Privacy Policy, and the selection of service providers who maintain internationally recognised security certifications such as ISO 27001 or SOC 2 Type II.

If you have concerns about the international transfer of your data, please contact the tkbd support team using the details in Section 14 of this policy.

tkbd retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, and in any case for no longer than required by our applicable licensing conditions and legal obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your account plus a minimum of 5 years following account closure, as required for AML and regulatory record-keeping purposes.
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction, in accordance with standard financial record-keeping requirements.
• Support and communication records: Retained for 3 years from the date of the last interaction, unless a dispute or legal proceedings are ongoing.
• Technical and usage data: Retained in identifiable form for up to 24 months, after which it is either deleted or anonymised for analytical purposes.
• Marketing preference records: Retained for the duration of your account. Opt-out records are retained indefinitely to ensure your preferences are respected even if you later create a new account.

When personal data is no longer required, it is securely deleted or anonymised using industry-standard data destruction procedures. Anonymised data that cannot be re-linked to you may be retained indefinitely for statistical and platform improvement purposes.

As a data subject, you hold the following rights in respect of your personal data held by tkbd. To exercise any of these rights, please contact us using the details in Section 14:

tkbd will respond to all verified rights requests within 30 days of receipt. In cases of complexity or high volume, this period may be extended by a further 30 days, in which case you will be notified of the extension and its reason. We will not charge a fee for processing rights requests unless they are manifestly unfounded or excessive.

Please note that certain rights are subject to limitations. For example, the right to erasure does not apply where tkbd is required to retain your data to comply with a legal obligation, or where the data is necessary for the establishment, exercise, or defence of legal claims.

If you are a parent or guardian and believe that your child has created a tkbd account or provided personal data to the platform, please contact us immediately at [email protected] so that we can take prompt remedial action. tkbd takes the protection of minors extremely seriously and operates mandatory age verification checks at account registration and at the point of first withdrawal.

tkbd implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the tkbd platform;
• Encryption at rest for all stored personal and financial data, using AES-256 or equivalent standards;
• Role-based access controls that ensure tkbd staff can only access personal data to the extent required for their specific job function;
• Multi-factor authentication for all internal administrative access to systems that store personal data;
• Regular third-party penetration testing and vulnerability assessments of the tkbd platform infrastructure;
• Automated anomaly detection to identify and respond to suspicious login activity, unusual transaction patterns, and potential data breach indicators;
• Data minimisation practices that ensure only the minimum necessary data is collected and retained for each processing purpose;
• Staff training on data protection obligations, phishing awareness, and secure data handling procedures.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, tkbd will notify you without undue delay after becoming aware of the breach, and will take all reasonable steps to contain and remediate the incident. tkbd maintains a documented incident response plan for this purpose.

While tkbd takes all reasonable steps to protect your data, no internet-based system can be guaranteed to be 100% secure. You also have a responsibility to keep your account credentials safe and to notify tkbd immediately if you suspect that your account has been compromised.

The tkbd platform integrates third-party services for game content delivery, payment processing, customer support tooling, and analytics. These third-party services operate under their own privacy policies and data protection frameworks. tkbd does not control the data practices of third-party game providers or payment service operators beyond the data processing agreements we hold with them.

tkbd does not embed third-party social media widgets, share buttons, or tracking pixels from social platforms (such as Facebook, Instagram, or Twitter) on the tkbd.io domain. Any social media presence maintained by tkbd under the tkbd brand name is operated separately and governed by the privacy policies of those respective platforms.

If you follow a link from the tkbd platform to any external website, your use of that website will be governed by its own privacy policy and terms of use. tkbd accepts no responsibility for the privacy practices of external sites.

tkbd reserves the right to update or amend this Privacy Policy at any time. Where a material change is made — for example, a change to the categories of data collected, the purposes for which it is used, or the third parties with whom it is shared — tkbd will provide notice to registered users via the email address on file at least 14 days before the change takes effect, where practically possible.

Minor changes, such as clarifications to existing language that do not alter the substance of the policy, may be made without advance notice. All changes will be reflected in the "Last Updated" date at the top of this page. You are encouraged to review this Privacy Policy periodically to stay informed of how tkbd handles your personal data.

Continued use of the tkbd platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you must cease using the platform and may request account closure by contacting the support team.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how tkbd has handled your personal data, please contact the tkbd Data Protection team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Please include "Privacy Policy Enquiry" or "Data Rights Request" in your subject line for fastest routing
• Support Hours: 24 hours a day, 7 days a week
• Response Time: Privacy and data rights requests are acknowledged within 2 business days and resolved within 30 calendar days

If you are not satisfied with tkbd's response to your privacy concern, you have the right to escalate your complaint to the relevant data protection authority or supervisory body applicable under the laws of your jurisdiction. tkbd will cooperate fully with any such authority in connection with a complaint or investigation.

tkbd takes all privacy complaints seriously. Every formal complaint received is logged, investigated, and responded to in writing. Where a complaint reveals a genuine data protection failing, tkbd will take corrective action and inform the complainant of the steps taken.