tkbazi Privacy Policy

1 Introduction

tkbazi ("we", "us", "our") operates the online casino and sports betting platform available at https://tkbazi.vip (the "Platform"). We are the data controller responsible for the personal information collected through the Platform. This Privacy Policy applies to all individuals who visit, register on, or interact with the tkbazi Platform, including players, prospective players, and visitors who have not yet registered.

This Privacy Policy is incorporated by reference into the tkbazi Terms & Conditions and forms part of the Agreement between tkbazi and every registered player. By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

tkbazi is committed to handling your personal data with transparency, integrity, and care. We design our data practices around the principle of data minimisation — we collect only what is genuinely necessary for the stated purposes — and we retain data only for as long as those purposes require or applicable law demands.

2 Personal Data We Collect

Depending on how you interact with the tkbazi Platform, we may collect the following categories of personal data:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (required for age verification — tkbazi is an 18+ platform);
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or elsewhere in Bangladesh);
• Email address and mobile phone number;
• Copies of identity documents submitted during KYC verification (national ID card, passport, or driving licence);
• Proof of address documents (utility bills, bank statements) submitted during enhanced verification.

2.2 Account & Transaction Data

• Your chosen username and encrypted password hash;
• Account registration date and time, in Bangladesh Standard Time (BST, UTC+6);
• Deposit and withdrawal history, including transaction amounts in Bangladeshi Taka (৳), transaction dates, and Payment Method used;
• Wagering history — game titles played, bet amounts, outcomes, and running balance;
• Bonus and promotion history, including bonuses claimed and wagering requirement progress;
• Any self-exclusion, deposit limit, or responsible gaming settings applied to your account.

2.3 Technical & Usage Data

• IP address at the time of registration and on each subsequent login;
• Device type, operating system, and browser version used to access the Platform;
• Pages visited, session duration, click paths, and feature usage patterns;
• Error logs and technical diagnostics generated during Platform use;
• Geolocation data derived from your IP address (country and city level only — we do not use GPS-level tracking).

2.4 Communications Data

• Records of correspondence between you and the tkbazi support team, including live chat transcripts and email exchanges;
• Survey responses or feedback submitted voluntarily;
• Marketing preference settings (opt-in or opt-out status for promotional communications).

3 How We Collect Your Data

tkbazi collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to a survey;
• Automated collection: Technical and usage data collected automatically when you access the Platform, via server logs, cookies, and similar tracking technologies (see Section 7);
• Third-party sources: Identity and address verification data returned by KYC/AML screening providers; fraud-detection signals from payment processors such as bKash, Nagad, Rocket, Upay, Visa, and Mastercard; and publicly available sanctions and watchlist databases where required by law.

tkbazi does not purchase personal data lists from data brokers and does not collect personal data from social media platforms without your explicit consent.

4 Purposes & Legal Basis for Processing

The table below sets out the specific purposes for which tkbazi processes your personal data and the corresponding legal basis for each processing activity:

Where tkbazi relies on legitimate interests as the legal basis for processing, we have assessed that our interests are not overridden by your fundamental rights and freedoms. You have the right to object to processing based on legitimate interests at any time — see Section 10 for details.

Where tkbazi relies on consent as the legal basis (for example, sending you promotional emails or SMS messages about new games, bonuses, or events), you may withdraw that consent at any time by updating your communication preferences in your account dashboard or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5 Data Sharing & Disclosure

tkbazi does not sell, rent, or trade your personal data with any third party for their own marketing or commercial purposes. We share your personal data only in the following limited and controlled circumstances:

5.1 Service Providers

We engage carefully selected third-party service providers who process personal data on our behalf and strictly under our instructions. These include:

• KYC and identity verification providers — to verify your identity and age in compliance with applicable requirements;
• Payment processors — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to process your financial transactions;
• Game content providers — Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi receive anonymised session tokens necessary to deliver game content; they do not receive your full identity data;
• Fraud prevention and cybersecurity providers — to monitor for suspicious activity and protect the integrity of the Platform;
• Customer support platforms — to facilitate support ticket management and communication records;
• Cloud infrastructure providers — for secure data hosting and storage.

All service providers are bound by data processing agreements that restrict their use of your personal data to the purposes for which it was shared and require them to implement appropriate security measures.

5.2 Legal & Regulatory Disclosure

tkbazi may disclose your personal data to law enforcement agencies, regulatory authorities, or other governmental bodies where we are legally required to do so, including in connection with anti-money laundering investigations, court orders, or fraud investigations. We will notify you of any such disclosure where we are legally permitted to do so.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the tkbazi business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you via the email address on your account in the event of any such transfer and will ensure that the receiving entity is bound by privacy obligations no less protective than those set out in this Policy.

6 Payment Data & Financial Information

tkbazi takes the handling of financial data with the utmost seriousness. When you make a deposit or request a withdrawal using bKash, Nagad, Rocket, Upay, or a bank card, the following practices apply:

• Full payment account credentials (bKash PIN, bank card numbers, internet banking passwords) are never collected, stored, or processed by tkbazi directly. These are entered on the secure interface of the respective payment provider;
• tkbazi receives only a transaction reference, amount, status confirmation, and a masked identifier (e.g., last four digits of a card or partial mobile number) sufficient to reconcile the transaction to your tkbazi account;
• All financial transaction data is encrypted at rest and in transit using industry-standard SSL/TLS protocols;
• Transaction records are retained for a minimum of five (5) years in accordance with standard financial record-keeping requirements.

7 Cookies & Tracking Technologies

tkbazi uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device by your browser when you visit a website. The following categories of cookies are used on the tkbazi Platform:

tkbazi does not use third-party advertising or retargeting cookies. You may manage or disable non-essential cookies through your browser settings. Note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from logging into your account.

8 Data Retention

tkbazi retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal and regulatory obligations. The general retention periods we apply are as follows:

• Active account data (identity, contact, account settings): Retained for the duration of your active account relationship with tkbazi;
• Transaction and wagering records: Retained for a minimum of five (5) years following the date of each transaction, in line with standard financial record-keeping obligations;
• KYC documentation (identity and address documents): Retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later;
• Support communications: Retained for three (3) years from the date of the last communication;
• Technical and usage logs: Retained for up to thirteen (13) months in anonymised or pseudonymised form for Platform analytics and security purposes;
• Self-exclusion records: Retained indefinitely to prevent re-registration by a permanently self-excluded player.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual. Where deletion is not immediately technically feasible (for example, data held in encrypted backup archives), the data will be isolated from active processing until it can be securely destroyed.

9 Data Security

tkbazi implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data exchanged between your device and tkbazi servers is encrypted using TLS 1.2 or higher. The presence of HTTPS and a valid SSL certificate on https://tkbazi.vip confirms this protection is active;
• Encryption at rest: Sensitive data fields — including identity document copies and financial transaction records — are encrypted at rest in the tkbazi database;
• Password security: Player passwords are never stored in plaintext. They are processed using a strong one-way hashing algorithm with an individual salt per account;
• Access controls: Internal access to player data is restricted on a need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular security training;
• Intrusion detection: tkbazi operates automated monitoring systems to detect and alert on anomalous access patterns, potential data breaches, and brute-force login attempts;
• Regular security reviews: The Platform's security posture is reviewed periodically, including vulnerability assessments of key infrastructure components.

10 Your Privacy Rights

As a tkbazi player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request":

• Right of Access: You may request a copy of all personal data tkbazi holds about you. We will respond within 30 days of receiving a valid request;
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. For minor corrections such as contact details, you may update these directly in your account dashboard;
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no overriding legal obligation requires us to retain it. Note that we are generally required to retain transaction and KYC records for a minimum of five years and cannot delete these on request;
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being resolved;
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, and machine-readable format so that it can be transferred to another service provider;
• Right to Object: You may object to processing based on legitimate interests or direct marketing at any time. Objections to direct marketing will be honoured immediately;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

tkbazi will respond to all privacy rights requests within 30 days. In complex cases, this period may be extended by a further 60 days, in which case we will inform you of the extension and the reason for it within the initial 30-day window. We may need to verify your identity before acting on a rights request to ensure we do not disclose data to an unauthorised person.

11 Children's Privacy

Parents and guardians who believe that a minor may have registered on the tkbazi Platform or provided personal information to the Platform are encouraged to contact us immediately at [email protected]. We also support the use of parental control software to prevent minors from accessing gambling content online.

12 Third-Party Links & Integrations

The tkbazi Platform integrates game content from third-party providers — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi. When you launch a game from one of these providers, your game session may be governed in part by that provider's own data practices in respect of game session data. tkbazi ensures that all integrated providers operate under data processing agreements consistent with this Privacy Policy and that no unnecessary personal data is transmitted to them.

The tkbazi Platform does not contain links to external third-party websites that are outside our control. If you navigate away from https://tkbazi.vip via a link not provided by tkbazi, this Privacy Policy does not apply to those external sites and tkbazi is not responsible for their privacy practices.

13 Updates to This Privacy Policy

tkbazi reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When a material change is made, we will update the "Effective Date" at the top of this document and, where practicable, notify registered players via the email address on their account.

We encourage you to review this Privacy Policy periodically. Your continued use of the tkbazi Platform following the publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not accept the revised Privacy Policy, you should cease using the Platform and contact [email protected] to request account closure.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way tkbazi handles your personal data, please contact us using the details below. We are committed to resolving all privacy-related queries promptly and transparently.

• Email: [email protected]
• Subject Line for Privacy Requests: "Privacy Rights Request"
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Website: https://tkbazi.vip