Your Privacy at tkbazz

★ Privacy at a Glance

1 Introduction

This Privacy Policy ("Policy") describes how tkbazz ("tkbazz", "we", "us", "our") collects, processes, stores, shares, and protects personal information relating to users ("you", "Player", "User") of the tkbazz website located at https://tkbazz.org and all associated products and services (collectively, the "Services").

By registering an account, accessing the Services, or otherwise providing personal data to tkbazz, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Services.

tkbazz is committed to handling all personal data responsibly, transparently, and in accordance with applicable data protection laws. We review and update this Policy periodically. The effective date at the top of this page reflects the most recent revision. Continued use of the Services after any update constitutes your acceptance of the revised Policy.

2 Personal Data We Collect

tkbazz collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the Services, and in limited circumstances from trusted third-party sources. The categories of personal data we collect are described below.

3 How We Collect Your Data

We collect personal data through the following methods:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, claiming bonuses, or contacting our support team.
• Automated technologies: As you navigate and interact with our website, we automatically collect Technical Data and Usage Data using cookies, server logs, and similar tracking technologies.
• Payment processors: Our payment partners (including bKash, Nagad, Rocket, Upay, and card processors) may share transaction confirmation data with us to reconcile deposits and withdrawals. These partners operate under their own privacy policies.
• Identity verification providers: During KYC checks, we may use third-party identity verification services that confirm the authenticity of documents you submit. These providers process data on our behalf under strict data processing agreements.
• Fraud prevention and AML services: We may receive data from third-party risk and compliance screening services to fulfil our anti-money laundering (AML) and fraud prevention obligations.
• Publicly available sources: In limited circumstances relevant to identity verification or fraud prevention, we may consult publicly available records such as official government registries.

4 How We Use Your Personal Data

tkbazz processes personal data only where a valid legal basis exists. The purposes for which we use your data, and the corresponding legal basis for each, are set out below:

1. Account creation and management: To register your account, verify your identity, and provide you with access to the full range of tkbazz Services. Legal basis: performance of a contract.
2. Processing deposits and withdrawals: To process financial transactions accurately and in a timely manner, and to maintain accurate transaction records. Legal basis: performance of a contract.
3. Customer support: To respond to your queries, complaints, and requests submitted via live chat or email. Legal basis: performance of a contract and legitimate interests.
4. Bonus and promotional management: To administer bonus offers, verify eligibility, track wagering progress, and prevent bonus abuse. Legal basis: performance of a contract and legitimate interests.
5. Legal and regulatory compliance: To fulfil our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) regulations. Legal basis: legal obligation.
6. Fraud detection and security: To monitor accounts and transactions for suspicious activity, protect against fraud, and maintain the integrity of the platform. Legal basis: legitimate interests and legal obligation.
7. Responsible gaming: To monitor gambling patterns, apply self-imposed limits, enforce self-exclusions, and fulfil our duty of care obligations to players. Legal basis: legal obligation and legitimate interests.
8. Platform analytics and improvement: To understand how players use our platform, identify technical issues, and improve the overall user experience. Legal basis: legitimate interests. Data used for analytics is aggregated and anonymised wherever practicable.
9. Marketing communications: To send you promotional emails, SMS notifications, and in-platform messages about bonuses and new games, where you have consented to receive such communications. Legal basis: consent. You may withdraw consent at any time by contacting support.

5 Sharing Your Personal Data

tkbazz does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

1. Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard processors receive only the transaction data necessary to process your deposits and withdrawals.
2. Identity verification and KYC providers: Third-party verification services that authenticate documents and confirm identity as part of our regulatory compliance obligations.
3. Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and session data necessary to deliver game content and resolve disputes.
4. Fraud prevention and AML screening services: Specialist third-party compliance services that help us detect suspicious activity and fulfil legal obligations.
5. IT infrastructure and cloud service providers: Hosting, database, and security service providers that process data on our behalf under binding data processing agreements.
6. Legal and regulatory authorities: We may disclose personal data to law enforcement, financial intelligence units, or regulatory bodies where required to do so by applicable law or a valid legal order.
7. Business successors: In the event of a merger, acquisition, or sale of all or part of the tkbazz business, player data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom we share personal data are required to process it in accordance with applicable data protection law and solely for the purposes for which it was shared. tkbazz remains responsible for ensuring that such processing is conducted lawfully and securely.

6 Cookies and Tracking Technologies

tkbazz uses cookies and similar tracking technologies to provide a functional, personalised, and secure experience on the platform. A cookie is a small text file stored on your device by your web browser when you visit a website. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the operation of the platform, including maintaining your login session and processing financial transactions. These cannot be disabled without impairing core functionality.
• Functional cookies: Remember your preferences such as language settings, preferred deposit method, and responsible gaming limit configurations, so you do not have to re-enter them on each visit.
• Analytics cookies: Collect anonymised or pseudonymous data about how players navigate and interact with the platform. This data is used to improve site performance and user experience. No personally identifiable data is shared with analytics providers for external advertising purposes.
• Security cookies: Used to detect and prevent fraudulent activity, including session hijacking and cross-site request forgery (CSRF) attacks.

7 Data Retention

tkbazz retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

1. Active account data: Retained for the lifetime of your account and for a period of five years following permanent account closure, in compliance with AML record-keeping requirements.
2. Transaction records: Financial transaction records are retained for a minimum of five years from the date of the transaction, as required by financial regulations.
3. KYC and identity documents: Verification documents are retained for five years from the date of submission or from account closure, whichever is later.
4. Support communications: Records of customer support interactions are retained for three years from the date of the interaction.
5. Technical and usage data: Log data and session data are retained for up to 24 months, after which they are deleted or anonymised.
6. Marketing consent records: Records of marketing consent and opt-out requests are retained for five years to demonstrate compliance with consent obligations.

When personal data is no longer required and no legal basis for retention exists, it is securely deleted or irreversibly anonymised in accordance with our internal data disposal procedures.

8 Your Data Protection Rights

Subject to applicable law, you have the following rights in relation to your personal data held by tkbazz. To exercise any of these rights, please contact us at [email protected]. We will respond to all verified requests within 30 calendar days.

1. Right of access: You may request a copy of the personal data tkbazz holds about you, along with information about how it is processed.
2. Right to rectification: You may request correction of any inaccurate or incomplete personal data held about you. For core account data, you can update most information directly through your account settings.
3. Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
4. Right to restrict processing: You may request that we limit the processing of your personal data in certain circumstances, for example while a dispute over data accuracy is being resolved.
5. Right to data portability: You may request a structured, machine-readable copy of personal data you have provided to tkbazz, where processing is based on consent or contract.
6. Right to object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. We will honour all opt-out requests for marketing communications promptly.
7. Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Please note that certain rights are subject to limitations. For example, we cannot erase data that we are legally required to retain for AML compliance purposes. Where we are unable to fulfil a request in full, we will explain the reason clearly and promptly.

9 Minors and Age Restriction

The tkbazz platform is strictly intended for adults aged 21 and above. We do not knowingly collect or process personal data relating to individuals under the age of 21. If we become aware that a player under the age of 21 has provided personal data or has registered an account, we will immediately close the account and securely delete all associated personal data.

If you believe that a minor has registered on tkbazz or provided personal data to us, please contact [email protected] immediately so we can investigate and take appropriate action without delay.

10 Data Security Measures

tkbazz implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption at rest for sensitive stored data including identity documents and payment records.
• Role-based access controls ensuring that personal data is accessible only to authorised personnel with a legitimate business need.
• Regular internal and external security audits and penetration testing.
• Multi-factor authentication for administrative access to systems holding personal data.
• Formal incident response procedures to detect, contain, and report data breaches in accordance with applicable law.

While we take all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. You are responsible for keeping your account credentials confidential. If you suspect any unauthorised access to your tkbazz account, please contact [email protected] immediately.

11 International Data Transfers

Some of our service providers and technology partners may process personal data outside of Bangladesh. Where such transfers occur, tkbazz ensures that appropriate safeguards are in place to protect your data, including contractual protections equivalent to those required under applicable data protection law. By using the Services, you consent to such transfers where necessary for the delivery of the Services.

12 Changes to This Privacy Policy

tkbazz may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or business operations. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify registered players via email or an in-platform notice. We encourage you to review this Policy periodically to stay informed about how we protect your data.

Your continued use of the Services following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms. If you object to any change, you should stop using the Services and may request account closure by contacting [email protected].

13 Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the tkbazz Data Protection team using the details below. We are committed to resolving all privacy-related queries promptly and transparently.