tk6999 Privacy Policy

1 Data Controller Information

For the purposes of this Privacy Policy, the data controller responsible for your personal information is tk6999, operating the online casino and sports-betting platform accessible at tk6999.app. As data controller, tk6999 determines the purposes and means by which your personal data is processed.

If you have any questions, concerns, or requests relating to the handling of your personal data, you may contact the tk6999 data protection team directly at:

tk6999 serves players primarily located in Bangladesh, including those based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. The platform operates in the English language and all data processing activities described in this policy apply equally to all registered players regardless of their city or region within Bangladesh.

2 Information We Collect

tk6999 collects personal information from you through several distinct channels: during account registration, during ongoing use of the platform, and through automated technical systems. The categories of personal data we collect are described below.

2.1 Information You Provide Directly

When you register a player account or subsequently update your profile, you provide us with:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (used to verify that you meet the minimum age requirement of 18 years)
• Residential address in Bangladesh (including district and division)
• Mobile phone number (used for account authentication and transaction notifications)
• Email address (used for account communications, bonus notifications, and support correspondence)
• Username and password (credentials used to access your account)

2.2 Identity Verification Documents

As part of our Know Your Customer (KYC) process, we may collect copies of:

• National Identity Card (NID) issued by the Bangladesh Election Commission
• Passport or driving licence (where NID is unavailable)
• Proof of address documents such as utility bills or bank statements dated within the last three months
• Proof of payment method ownership (e.g., a screenshot of your registered bKash, Nagad, or Rocket account showing your name and mobile number)

2.3 Financial and Transaction Data

When you make deposits or request withdrawals through tk6999, we collect information relating to those transactions, including:

• Mobile Financial Service account details (bKash, Nagad, Rocket, Upay account numbers)
• Bank account details where bank transfer is the selected payment method (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank)
• Transaction amounts in Bangladeshi Taka (BDT ৳)
• Transaction timestamps, reference numbers, and payment status records
• Deposit and withdrawal history maintained for a minimum of five years for compliance purposes

2.4 Gameplay and Betting Activity

tk6999 records data relating to your activity on the platform, including:

• Games played (slots, live casino, cricket betting markets, virtual casino, Astar Live)
• Wager amounts, odds accepted, bet outcomes, and winnings
• Session duration, login timestamps, and logout events
• Bonus claims, wagering progress, and bonus expiry events
• In-game behaviour data used for responsible gaming monitoring (e.g., rapid repeated wagers, unusually large stake increases)

2.5 Technical and Device Data

When you access tk6999 via a web browser or mobile device, we automatically collect certain technical information, including:

3 How We Use Your Data

tk6999 uses the personal information collected from you for clearly defined, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary uses of your personal data are as follows:

Account Management and Service Delivery

Your registration data is used to create and maintain your player account, authenticate your identity each time you log in, and deliver the core services of the tk6999 platform — including sports betting on cricket, football, and kabaddi; slot games from providers such as Pragmatic Play, NetEnt, and Microgaming; live casino experiences from Evolution Gaming and Ezugi; and virtual casino and Astar Live content.

Payment Processing

Financial data is used to process deposits and withdrawals accurately and securely through your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer). Transaction records are maintained for audit, dispute resolution, and statutory compliance purposes.

Identity Verification and Fraud Prevention

KYC documentation is used to verify that you are who you claim to be, that you meet the minimum age requirement of 18 years, and that your use of the platform is consistent with anti-money laundering obligations. Automated and manual fraud detection systems analyse transaction patterns and betting behaviour to identify suspicious activity that may indicate account compromise, bonus abuse, or financial crime.

Responsible Gaming Monitoring

Gameplay and session data is used to identify patterns that may indicate problem gambling behaviour, such as sustained losing sessions, rapidly escalating stakes, or unusually frequent logins at atypical hours. Where such patterns are detected, tk6999 may reach out proactively with responsible gaming resources. Players may also use this data foundation to set personal deposit limits, cooling-off periods, or self-exclusion through the Responsible Gaming tools.

Personalisation and Communications

With your consent, tk6999 may use your activity data and preferences to personalise the platform experience — for example, surfacing cricket betting markets relevant to upcoming BPL or T20 World Cup fixtures, or highlighting slot games from providers you have previously engaged with. Promotional communications (bonus offers, seasonal promotions for events such as Eid, Pohela Boishakh, and Victory Day) are sent only where you have opted in to receive them.

Platform Improvement and Analytics

Aggregated and anonymised usage data is used to improve the tk6999 platform — identifying underperforming features, testing new interfaces, and prioritising development resources. Aggregated analytics data does not identify individual players and is not shared externally in identifiable form.

Legal and Regulatory Compliance

Certain data is retained and processed because we are legally required to do so. This includes transaction records for anti-money laundering compliance, KYC documentation for identity verification obligations, and correspondence records for dispute resolution purposes.

4 Legal Basis for Processing

tk6999 processes your personal data only where a recognised legal basis exists for doing so. The legal bases applicable to the main categories of processing carried out by tk6999 are summarised in the table below.

Where tk6999 relies on legitimate interests as the legal basis for processing, we have assessed that our interests are not overridden by your privacy rights, taking into account the nature of the data involved, the reasonable expectations of players on a regulated gaming platform, and the safeguards in place to protect your information.

5 Data Sharing & Third Parties

tk6999 does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own marketing or commercial purposes. We share your data only in the limited circumstances described below, and always subject to contractual data protection obligations.

Payment Service Providers

To process deposits and withdrawals, tk6999 shares the minimum necessary financial data with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card processors operating Visa and Mastercard networks in Bangladesh. These providers receive only the transaction-specific data required to execute the payment and are contractually prohibited from using your data for any other purpose.

Game Content Providers

Games available on tk6999 are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited session and gameplay data necessary to render games correctly, maintain game integrity, and support dispute resolution. Game providers operate under their own certified data handling frameworks.

KYC and Identity Verification Partners

Where automated identity verification services are used to supplement manual KYC review, your identity document data and photograph may be shared with a specialist KYC verification partner. These partners are bound by strict data processing agreements and are prohibited from retaining your data beyond the verification transaction.

Fraud Prevention and Security Services

tk6999 uses third-party fraud detection and cybersecurity services that may process IP addresses, device fingerprints, and behavioural signals to identify suspicious activity. These services operate on aggregated or pseudonymised signals and do not have access to your full personal profile.

Legal and Regulatory Disclosure

tk6999 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law or by order of a competent authority. In such cases, we will disclose only the data specifically requested and will, where permitted by law, notify you that a disclosure request has been received.

6 Cookies & Tracking Technologies

tk6999 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and gather analytics data that helps us improve the player experience. This section explains what cookies we use and how you can manage them.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to store small amounts of data relating to your preferences or session state. Cookies do not contain executable code and cannot access other files on your device.

Types of Cookies Used by tk6999

Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled as they are essential for the platform to function correctly. You may disable functional, analytics, and marketing cookies through your browser settings. Most modern browsers allow you to view, delete, and block cookies through their privacy or settings menu. Please note that disabling certain cookies may affect the functionality of the tk6999 platform — for example, your game lobby layout preferences may not be saved between sessions.

Instructions for managing cookies in commonly used browsers are available via the browser's own help documentation. tk6999 does not currently respond to browser-level "Do Not Track" (DNT) signals, as no uniform industry standard for DNT has been established.

7 Data Retention

tk6999 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The table below summarises our standard retention periods by data category.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with you as an individual. Where data cannot be immediately deleted due to system architecture constraints, it is isolated from active processing until deletion is technically feasible.

If you request deletion of your account before the end of a statutory retention period, tk6999 will deactivate your account immediately but will retain the minimum data required to fulfil legal obligations for the duration of the applicable period.

8 Data Security Measures

tk6999 implements a layered approach to data security, combining technical controls, organisational policies, and staff training to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Our key security measures include:

Technical Controls

• SSL/TLS Encryption in Transit: All data exchanged between your browser or device and tk6999 servers is encrypted using Transport Layer Security (TLS). Our platform enforces HTTPS across all pages and API endpoints.
• Encryption at Rest: Sensitive personal data stored on tk6999 servers — including identity documents and financial data — is encrypted at rest using AES-256 or equivalent industry-standard encryption.
• Access Controls: Access to personal data is governed by a strict role-based access control (RBAC) policy. Only personnel who require access to perform their specific job function are granted it, and access rights are reviewed regularly.
• Intrusion Detection: Network traffic is monitored continuously for anomalous patterns that may indicate an attempted breach or data exfiltration. Automated alerts trigger immediate review by the security team.
• Regular Security Audits: tk6999 conducts periodic security assessments, including vulnerability scanning and penetration testing, to identify and remediate weaknesses before they can be exploited.

Organisational Controls

• All staff with access to personal data are required to complete data protection training and are bound by confidentiality agreements.
• Third-party service providers are vetted for data security standards before being onboarded and are required to maintain equivalent security controls under contractual obligation.
• tk6999 maintains a documented incident response plan that is activated in the event of a confirmed or suspected data breach.

In the Event of a Data Breach

If tk6999 becomes aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify affected players promptly — and without undue delay — by email to the address on file. The notification will describe the nature of the breach, the categories and approximate number of records affected, the likely consequences, and the measures we are taking to address it.

9 Your Privacy Rights

As a player on the tk6999 platform, you have a number of rights in relation to the personal data we hold about you. These rights are set out below, along with guidance on how to exercise them.

Right of Access

You have the right to request a copy of the personal data tk6999 holds about you. Upon receipt of a verified access request, we will provide you with a summary of the data we hold, the purposes for which it is processed, the categories of recipients with whom it has been shared, and the retention period applicable to it. We aim to respond to access requests within 30 days.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You may update basic account information (such as your email address or mobile number) directly through your account settings. For changes to identity-critical fields such as your legal name or date of birth, you will be required to provide supporting documentation.

Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that this right is subject to our legal retention obligations — we cannot delete data that we are required by law to retain for a specified period.

Right to Restriction of Processing

You have the right to request that tk6999 restricts the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved, or where you have objected to processing and a determination of the grounds is pending.

Right to Data Portability

Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format. You may also request that this data be transmitted directly to another service provider where technically feasible.

Right to Object to Marketing

You have an unconditional right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of an objection, tk6999 will cease all marketing communications to you without delay. You may exercise this right by unsubscribing via the link in any marketing email, by updating your communication preferences in your account settings, or by contacting support directly.

How to Submit a Privacy Request

To exercise any of the rights described above, please submit your request in writing to [email protected] with the subject line "Privacy Rights Request". To protect your privacy, we will need to verify your identity before processing the request. We will acknowledge your request within 5 business days and aim to resolve it within 30 calendar days. In cases of exceptional complexity, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

10 Updates to This Policy

tk6999 reviews this Privacy Policy periodically to ensure it accurately reflects our data processing practices and remains aligned with applicable law and industry standards. We reserve the right to update or amend this policy at any time.

When material changes are made — meaning changes that significantly affect how your personal data is collected, used, or shared — we will notify registered players by email to the address on file with a minimum of 7 days' notice before the revised policy takes effect. The effective date at the top of this document will be updated to reflect the date the revised policy comes into force.

For non-material changes (such as typographical corrections, clarifications that do not alter the substance of a provision, or updates to reflect new but equivalent payment partners), the policy may be updated without prior notice. The revised policy will be published at tk6999.app/privacy-policy and will display the updated effective date.

Your continued use of the tk6999 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised policy, you must cease using the platform and may request account closure in accordance with the process described in the Terms & Conditions.