Privacy Policy — tk555

This Privacy Policy ("Policy") describes how tk555 ("tk555", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of all individuals ("you", "your", "Player", "User") who visit, register on, or otherwise interact with the tk555 online casino and sports betting platform available at https://tk555.bar and any associated mobile-optimised interfaces (collectively, the "Platform").

By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and you consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference.

This Policy applies to all personal data collected through the Platform regardless of the device or method of access — whether via desktop browser, mobile browser, or any native application interface. It covers data collected both during account registration and throughout the lifetime of your account.

tk555 collects personal data across several categories depending on the nature of your interaction with the Platform. The table below outlines the categories of data collected and the specific data points within each category.

We do not collect sensitive special-category data (such as racial or ethnic origin, religious beliefs, political opinions, or health data) except where you voluntarily disclose such information in the context of a responsible gaming or self-exclusion request, in which case it is processed solely for the purpose of protecting your welfare.

tk555 collects personal data through the following primary channels:

• Direct submission: Information you provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal, contacting support via live chat or email, or responding to a survey.
• Automated technical collection: Data collected automatically when you access the Platform, including IP addresses, browser fingerprint data, cookie identifiers, and session activity logs. This collection occurs regardless of whether you are logged in.
• Payment processor integration: When you initiate a transaction via bKash, Nagad, Rocket, Upay, or a bank transfer, our payment processing partners share confirmation data (transaction reference, amount, payer mobile number or account ID) with tk555 to credit your account and maintain financial records.
• Game provider data feeds: Certified game providers such as Evolution Gaming, Pragmatic Play, Spribe, Microgaming, NetEnt, and Ezugi transmit round-level gameplay data (game ID, bet amount, outcome, timestamp) to tk555 in real time to maintain accurate account balances and wagering records.
• Identity verification partners: Where tk555 uses a third-party KYC verification service to cross-check identity documents against official databases, that service may return a verified/unverified status and a confidence score to tk555. The underlying document data is not stored by the verification partner beyond the period required to complete the check.
• Publicly available sources: In cases of suspected fraud or prohibited conduct, tk555 may cross-reference publicly available information (such as public court records or sanctions lists) to verify a player's identity or eligibility.

tk555 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: Processing your identity, contact, and financial data is necessary to create and maintain your account, process deposits and withdrawals, and fulfil the obligations set out in our Terms & Conditions. Without this processing, we cannot provide the Platform services.
• Compliance with legal obligations: tk555 is required to collect and retain certain data — particularly KYC identity documents, transaction records, and responsible gaming decisions — to comply with anti-money laundering (AML) best practices and internal compliance standards.
• Legitimate interests: tk555 processes technical and account activity data to detect and prevent fraud, enforce the one-account policy, protect the integrity of the Platform, and improve the player experience. We have assessed that these legitimate interests are not overridden by your data protection rights in the context of an online gaming platform with appropriate safeguards.
• Consent: Where we send you promotional communications, personalised bonus offers, or marketing emails, we do so based on your freely given, specific, and informed consent obtained at registration or at a later point. You may withdraw consent at any time by contacting support or adjusting your account notification preferences.
• Vital interests: In limited circumstances — specifically where a player's responsible gaming data suggests a serious welfare risk — tk555 may process additional data to protect the vital interests of that individual, including escalating a self-exclusion request or temporarily restricting account access.

The personal data tk555 collects is used for the following purposes. Each purpose is linked to the legal basis identified in Section 4:

• Account creation and management: To register your account, verify your identity, maintain your player profile, and provide access to all Platform features including the casino, live tables, and sports betting.
• Payment processing: To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard; to maintain an accurate transaction ledger; and to investigate any disputed transactions.
• KYC and compliance: To verify that you meet the minimum age requirement of 21 years, confirm your identity, and satisfy our internal AML and responsible gaming compliance standards before processing withdrawals above standard thresholds.
• Customer support: To respond to your enquiries, complaints, and technical support requests via live chat and email; to maintain a record of communications for quality assurance and dispute resolution purposes.
• Responsible gaming: To administer deposit limits, cooling-off periods, reality checks, and self-exclusion elections you have activated; to monitor account activity for behavioural patterns that may indicate problem gambling and to intervene proactively where appropriate.
• Fraud prevention and platform integrity: To detect and investigate multiple accounts, bonus abuse, collusion, money laundering, chargebacks, and other forms of prohibited conduct as defined in our Terms & Conditions.
• Personalisation and marketing: Where you have given consent, to send you personalised bonus offers, promotional emails, and platform news relevant to your gaming preferences and the Bangladesh market (including BPL and IPL promotions, Eid bonuses, and Pohela Boishakh offers).
• Platform improvement: To analyse aggregated and anonymised usage data to improve game selection, page performance, payment flow efficiency, and the overall player experience on the Platform.

tk555 does not sell, rent, or trade your personal data to third parties for commercial purposes under any circumstances. We share your data only in the following limited and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive only the minimum transaction data necessary to process your deposit or withdrawal (transaction amount, your registered account identifier, and a tk555 transaction reference).
• Game providers: Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, Spribe, Ezugi, and other certified studio partners receive your anonymous player session token and wager data to operate live and RNG games. They do not receive your full identity or financial details.
• Identity verification providers: Where a third-party KYC service is used, your identity document images and identity data are shared for the sole purpose of performing the verification check. Data is transmitted over encrypted connections and is not retained by the provider beyond the verification window.
• Legal and regulatory requirements: tk555 may disclose your data to competent authorities, law enforcement agencies, or courts if required to do so by applicable law, court order, or lawful government request. We will notify you of any such disclosure where permitted to do so by law.
• Corporate transactions: In the event of a merger, acquisition, or sale of assets involving tk555, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer by email and this Policy will be updated accordingly.
• Professional advisers: Our legal counsel, auditors, and compliance consultants may access personal data on a strictly need-to-know basis, subject to contractual confidentiality obligations.

All third parties with whom tk555 shares personal data are required by contract to implement appropriate technical and organisational security measures and to process your data only in accordance with tk555's instructions and applicable data protection principles.

tk555 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session security, and gather aggregated analytics. The following types of cookies are used:

tk555 does not use third-party advertising or behavioural targeting cookies. You can manage cookie preferences through your browser settings, but disabling strictly necessary cookies will impair the functionality of the Platform. For questions about our cookie usage, contact [email protected].

tk555 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL encryption: All data transmitted between your device and the tk555 servers is encrypted in transit using TLS 1.2 or higher. Our SSL certificate is maintained continuously and renewed before expiry.
• Encryption at rest: Sensitive data stored on tk555 servers — including identity documents, financial records, and password hashes — is encrypted at rest using AES-256 or equivalent standards.
• Password security: Player passwords are never stored in plain text. We store only a salted cryptographic hash. tk555 staff cannot retrieve your password — if you lose access, a reset procedure is required.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. All staff members with access to player data are subject to confidentiality agreements and regular security training.
• Infrastructure security: tk555's servers are hosted in secured data centres with physical access controls, network segmentation, intrusion detection systems, and regular vulnerability assessments.
• Incident response: tk555 maintains a documented data breach response procedure. In the event of a confirmed breach affecting player data, affected players will be notified by email within 72 hours of the breach being identified.

tk555 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, compliance, accounting, or dispute resolution requirements. The following retention periods apply:

After the applicable retention period has expired, your data is either permanently deleted from tk555's systems or irreversibly anonymised so that it can no longer be associated with you as an individual. Anonymised aggregated data may be retained indefinitely for statistical analysis.

As a player on the tk555 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Subject Request". We will acknowledge your request within 3 business days and provide a full response within 30 days:

• Right of access: You have the right to request a copy of all personal data tk555 holds about you, together with an explanation of how it is being used and on what legal basis.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to erasure ("right to be forgotten"): You may request that tk555 delete your personal data. This right is subject to overriding retention obligations — for example, we are required to retain financial transaction records and KYC documents for the periods set out in Section 9 and cannot delete these upon request.
• Right to restrict processing: You have the right to request that tk555 restrict the processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold, or where processing is unlawful but you prefer restriction over deletion.
• Right to data portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service where technically feasible.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling for fraud detection purposes, where you believe your particular circumstances justify an override. tk555 will assess each objection on its merits.

The tk555 Platform is intended exclusively for adults aged 21 years and above. tk555 does not knowingly collect personal data from individuals under the age of 21. If we discover or are notified that a person under 21 has created an account or submitted personal data to the Platform, we will:

• Immediately suspend the account pending investigation.
• Permanently close the account and void all associated wagers and balances.
• Delete all personal data associated with the underage account as soon as practicable, subject to any overriding legal obligation to retain evidence of the breach for compliance purposes.
• Retain a minimal record (without retaining the full personal profile) to prevent the individual from re-registering until they reach the minimum age.

Parents or guardians who believe a minor has accessed the Platform or submitted personal data should contact [email protected] immediately. We take the protection of minors with the utmost seriousness and will act swiftly on all credible reports.

The tk555 Platform may contain references to third-party payment services (such as bKash, Nagad, and Rocket) that operate their own distinct platforms and websites. When you access those third-party services — for example, by opening the bKash app to complete a deposit — you are subject to the privacy policy of that third-party provider, not this Policy.

tk555 does not control the content, privacy practices, or data processing activities of third-party payment providers, game studios, or any other external entity. We recommend that you review the privacy policies of any third-party service you use in connection with your tk555 account to understand how they handle your personal data.

tk555 is not responsible for the privacy practices of third-party providers and accepts no liability for any data processing carried out by those providers beyond the scope of the data-sharing arrangements described in Section 6 of this Policy.

tk555 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, Platform features, or applicable legal standards. When material changes are made to this Policy, we will:

• Update the "Last Updated" date at the top of this document.
• Send a notification email to all registered players at their email address on file, summarising the key changes.
• Display a prominent notice on the Platform for a minimum of seven (7) days before the revised Policy takes effect.

Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with any change to this Policy, you should discontinue use of the Platform and contact support to arrange the closure of your account.

Previous versions of this Policy are archived and available upon written request to [email protected]. Please include "Privacy Policy Archive Request" in the subject line of your email.

All privacy-related enquiries, data subject requests, and complaints regarding tk555's data processing practices should be directed to our support team using the contact details below. Our team is available around the clock on Bangladesh Standard Time (BST, UTC+6):

• Email: [email protected] — use subject line "Privacy Enquiry" or "Data Subject Request" as appropriate
• Live Chat: Available directly on the Platform — average response time under three minutes for general queries
• Formal Complaints: Use subject line "Privacy Complaint" — tk555 will acknowledge within 24 hours and provide a final response within 14 business days

When submitting a data subject request, please include your full name, registered email address, and a description of the specific right you wish to exercise. To protect your privacy, we will verify your identity before processing your request. We aim to respond to all data subject requests within 30 calendar days of receipt.