tk4666 Privacy Policy — Your Data, Handled With Care

1 Data We Collect

tk4666 collects personal data in several ways: directly from you when you register an account or interact with our services; automatically through your use of the platform; and in limited circumstances from trusted third-party sources such as payment providers and identity verification services.

Registration and Account Data: When you create a tk4666 account, we ask you to provide your full legal name, date of birth, email address, and a Bangladesh-registered mobile number. This information is required to establish your identity, verify your eligibility (18+), and maintain your account in good standing.

Payment and Transaction Data: To process deposits and withdrawals in Bangladeshi Taka (৳), we collect transaction references, payment method identifiers (such as your bKash or Nagad wallet number in truncated form), transaction amounts, timestamps, and currency. Full payment credentials are processed directly by your chosen payment provider and are not stored on tk4666 servers.

Identity Verification (KYC) Data: As part of our Know Your Customer obligations, we may ask you to submit copies of a valid government-issued identity document such as a Bangladesh National Identity Card (NID), passport, or birth certificate, along with a recent proof of address. These documents are stored securely and used solely for verification purposes.

Technical and Device Data: Our systems automatically collect certain technical data when you access the tk4666 platform, including your IP address, browser type and version, operating system, device model, screen resolution, referring URL, and session timestamps. This data is used to deliver the platform, detect fraud, and improve service performance.

Gameplay and Betting Data: We record details of all bets placed, games played, wagering amounts, win and loss outcomes, bonus utilisation, and session duration. This data is used to administer your account, settle bets accurately, calculate bonuses, and monitor for responsible gaming indicators.

2 How We Use Your Data

tk4666 processes personal data only where there is a legitimate basis for doing so. The primary legal bases we rely on are: performance of the contract between you and tk4666 (i.e., operating your account and delivering the services you have signed up for); compliance with our legal obligations; and our legitimate interests in operating a safe, fair, and commercially viable gaming platform.

• Account Administration: Creating, maintaining, and closing your player account; verifying your identity and age; managing your account balance; and processing deposits and withdrawals in BDT.
• Service Delivery: Providing access to cricket betting, live casino, slots, Lucky Dice, Double Fortune, and all other products available on the tk4666 platform.
• Financial Processing: Settling bets and game outcomes; crediting winnings; processing withdrawal requests to your nominated bKash, Nagad, Rocket, Upay, Visa, or Mastercard account; and detecting and preventing fraudulent transactions.
• Legal and Regulatory Compliance: Complying with applicable anti-money laundering obligations; responding to lawful requests from competent authorities; and maintaining records as required by applicable law.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling; enforcing self-exclusion and deposit limit requests; and reaching out proactively where responsible gaming indicators are detected.
• Customer Support: Responding to your queries, complaints, and requests submitted via email at [email protected]; and maintaining records of support interactions for quality assurance and dispute resolution.
• Platform Security: Detecting and preventing account takeovers, bonus abuse, collusion, match-fixing, and other prohibited conduct described in the Terms & Conditions.
• Service Improvement: Analysing aggregated and anonymised usage data to understand player behaviour, identify technical issues, and improve the overall quality of the tk4666 platform.

tk4666 does not use your personal data to make fully automated decisions that produce legal or similarly significant effects without human oversight, except where this is required for fraud prevention and security purposes, in which case you have the right to request human review of any such decision.

3 Data Sharing and Disclosure

tk4666 does not sell, rent, or disclose your personal data to third parties for their own marketing or commercial purposes. Data is shared with external parties only in the specific and limited circumstances described below.

Payment Service Providers: To process deposits and withdrawals, we transmit the minimum necessary data to payment providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. These providers operate under their own privacy policies and security frameworks, which we encourage you to review independently.

Game Content Providers: When you launch a casino game, a game session token is transmitted to the relevant game studio (for example, Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, or Microgaming) to authenticate the session. Only a pseudonymous session identifier is shared; your name, contact details, and financial data are not passed to game studios.

Identity Verification Services: Where we use a third-party KYC provider to assist with document verification, your identity documents and the associated data are processed by that provider under a strict data processing agreement with tk4666. The provider may not use your data for any purpose other than completing the verification request.

Legal and Regulatory Authorities: tk4666 will disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of tk4666, its players, or the public. We will notify you of any such disclosure where we are legally permitted to do so.

• All third-party service providers with whom we share data are contractually required to maintain appropriate technical and organisational security measures.
• Data transfers to third-party providers are limited to the minimum information necessary for the specific purpose of the transfer.
• tk4666 does not share personal data with social media platforms, advertising networks, or data brokers.

4 Cookies and Tracking Technologies

tk4666 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, maintain your login session, and analyse usage patterns. A cookie is a small text file stored by your browser on your device. The table below summarises the types of cookies used on the tk4666 platform.

Strictly necessary cookies cannot be disabled as they are essential to the operation of the platform. You may configure your browser to block or delete functional and analytical cookies; however, doing so may impair the functionality of certain platform features. Instructions for managing cookies are available in your browser's help documentation.

tk4666 does not use third-party advertising or retargeting cookies. We do not participate in cross-site tracking schemes that follow your activity outside of the tk4666 platform.

5 Data Retention

tk4666 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods applied to the main categories of personal data are summarised below.

• Account and Identity Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in order to comply with anti-money laundering record-keeping requirements.
• Transaction and Financial Data: Retained for a minimum of seven (7) years from the date of each transaction to comply with financial record-keeping obligations.
• KYC Documents: Retained for the period required by applicable law, typically five (5) years from the date of verification or from account closure, whichever is later.
• Gameplay and Betting Records: Retained for a minimum of three (3) years to support dispute resolution, responsible gaming reviews, and audit requirements.
• Support Communications: Retained for two (2) years from the date of the last interaction, unless the communication is linked to an ongoing dispute or legal proceeding, in which case it is retained until that matter is resolved.
• Technical Logs: Typically retained for ninety (90) days for security monitoring purposes, after which they are deleted or anonymised.

On expiry of the applicable retention period, personal data is securely deleted or anonymised in such a way that it can no longer be attributed to an identifiable individual. Where anonymisation is not technically feasible, data is pseudonymised and access is restricted to authorised personnel only.

6 Your Data Rights

tk4666 recognises that players have rights over their personal data and we are committed to honouring those rights in a timely and transparent manner. The following rights are available to all players on the tk4666 platform:

• Right of Access: You may request a copy of the personal data that tk4666 holds about you at any time. We will provide this in a structured, commonly used format within a reasonable timeframe upon receipt of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor account details such as your contact email or phone number can often be updated directly within your account settings.
• Right to Erasure: In certain circumstances you may request that tk4666 delete your personal data. This right is subject to limitations where retention is required by law (see Section 5) or where the data is necessary for the defence of a legal claim.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to Object: Where processing is based on legitimate interests, you have the right to object to that processing. tk4666 will assess your objection and cease processing unless we have compelling legitimate grounds that override your interests.
• Right to Data Portability: Where processing is carried out by automated means and is based on your consent or contractual necessity, you may request that your personal data be provided to you in a machine-readable format.

To exercise any of the above rights, please contact the tk4666 support team in English at [email protected]. We will acknowledge your request promptly and respond within thirty (30) days, or inform you if additional time is required. We may ask you to verify your identity before processing a data rights request to ensure we do not disclose or alter data in response to an unauthorised request.

7 Data Security

tk4666 implements a layered approach to data security, combining technical, administrative, and physical safeguards to protect the personal data of players across Bangladesh from unauthorised access, disclosure, alteration, or destruction.

• Transport Encryption: All data in transit between your device and the tk4666 platform is protected by TLS 1.2 or higher. We enforce HTTPS across all platform endpoints and reject insecure connection attempts.
• Encryption at Rest: Sensitive personal data fields, including identity verification data and payment references, are encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within tk4666's internal systems is restricted on a need-to-know basis. All staff with access to player data are bound by confidentiality obligations and receive regular data protection training.
• Fraud Detection Systems: Automated systems monitor login activity, transaction patterns, and gameplay behaviour in real time to detect and respond to security incidents such as account takeover attempts, credential stuffing, and unusual financial activity.
• Incident Response: In the event of a data security incident that poses a risk to your rights as a player, tk4666 will notify you without undue delay, provide details of the incident and the data affected, and describe the steps taken to mitigate the impact.

While tk4666 applies industry-standard security measures, no platform can guarantee absolute security. Players are also responsible for maintaining the security of their account credentials and should use a strong, unique password for their tk4666 account and never share their login details with any third party.

8 Changes to This Policy

tk4666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform services. When we make material changes to this policy, we will update the "Last Updated" date at the top of the document and, where the changes are significant, notify active players by email or via an in-platform notification.

Continued use of the tk4666 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We recommend that you review this page periodically to stay informed about how we handle your personal data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which tk4666 processes your personal data, please contact our support team in English at [email protected]. We take all privacy-related enquiries seriously and will respond within a reasonable timeframe. Where your concern relates to a potential data breach or urgent security matter, please mark your email as urgent and we will prioritise your request.