Your Privacy Matters at tk10i

tk10i collects personal data in several ways: directly from you when you register or interact with the platform, automatically through your use of the site, and from third-party payment and identity verification providers. The categories of data we collect are set out below.

We collect only the minimum data necessary to provide you with a safe, compliant, and functional platform experience. Where optional data fields are present during registration or account management, they are clearly marked as optional.

tk10i processes your personal data only where we have a lawful basis for doing so. The primary legal bases we rely on are: performance of a contract (operating your player account), legal obligation (identity verification, anti-money laundering compliance), legitimate interests (fraud prevention, platform security), and consent (marketing communications, where applicable).

The specific purposes for which we use your data are as follows:

• Account creation and management: To register your player account, verify your identity, and maintain your account settings and preferences throughout your time on the platform.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and City Bank, and to maintain accurate transaction records in Bangladeshi Taka.
• Age and identity verification (KYC): To confirm that you are 18 years of age or older and that the personal details you have provided are accurate, as required for responsible gaming compliance.
• Fraud detection and security: To monitor account activity for unusual patterns, detect and investigate potential fraud or collusion, and protect the integrity of the platform for all players.
• Legal and regulatory compliance: To meet our anti-money laundering (AML) obligations, respond to lawful requests from competent authorities, and maintain required financial records.
• Responsible gaming: To monitor betting patterns for signs of problem gambling, apply self-exclusion restrictions, enforce deposit limits, and flag accounts that may require intervention in line with our Responsible Gaming Policy.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality and training purposes.
• Platform improvement: To analyse aggregated, anonymised usage data to improve game selection, site performance, and the overall user experience for Bangladeshi players.
• Marketing communications: To send you promotional emails, SMS notifications about bonuses, and seasonal offers (such as Eid or BPL promotions) where you have provided consent. You may withdraw consent at any time via your account settings or by contacting support.

tk10i uses cookies and similar technologies (such as local storage and session tokens) to operate core platform functions, maintain your login session, and understand how players use the site. A cookie is a small text file stored on your device when you visit a website. Cookies themselves do not contain personally identifiable information, but they may link to personal data we already hold about you.

We use the following categories of cookies on the tk10i platform:

tk10i does not use third-party advertising cookies or tracking pixels that follow your activity across other websites. We do not participate in cross-site behavioural advertising networks.

tk10i does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your data only in the limited circumstances described below, and only with parties who are contractually obligated to handle it securely and in accordance with applicable data protection standards.

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and City Bank receive the minimum data necessary to process your deposits and withdrawals. Each of these providers operates under their own privacy and security frameworks.
• Identity verification (KYC) providers: Third-party KYC service providers receive your identity documents and biometric data (if applicable) solely for the purpose of verifying your age and identity. These providers are contractually prohibited from using your data for any other purpose.
• Fraud prevention and AML screening: We may share transaction data with specialised fraud prevention and anti-money laundering screening services to identify suspicious activity and meet our legal compliance obligations.
• Platform technology providers: Game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) receive anonymised session data required to deliver their games through the tk10i platform. These providers do not receive your identity or payment data.
• Legal and regulatory authorities: tk10i will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by law, or where we believe disclosure is necessary to protect the rights, property, or safety of tk10i, our players, or the public.

tk10i does not share your personal data with any affiliated marketing companies, social media platforms, data brokers, or advertising networks. Any aggregated or anonymised data used for business analytics contains no information that could identify you as an individual.

tk10i retains your personal data for as long as your account is active and for a defined period after account closure, in accordance with our legal obligations and operational requirements. The retention periods applicable to each data category are as follows:

• Account and identity data: Retained for the duration of your active account plus 5 years after permanent account closure. This period is required to meet financial record-keeping and anti-money laundering obligations.
• Transaction records: Retained for 5 years from the date of each transaction, in line with standard financial record-keeping requirements.
• KYC documents: Retained for the duration of your active account plus 5 years after account closure. Physical document scans are stored in encrypted form and access is restricted to authorised compliance personnel only.
• Support communications: Live Chat transcripts and email threads are retained for 3 years from the date of the interaction, for quality assurance and dispute resolution purposes.
• Behavioural and analytics data: Anonymised and aggregated after 24 months; individual-level behavioural logs are retained for 24 months from the date of activity.
• Marketing consent records: Retained for as long as you hold an active marketing consent preference on file, plus 2 years after withdrawal of consent.

All personal data held by tk10i is stored on servers protected by industry-standard physical and logical security controls. Access to personal data is restricted to authorised tk10i personnel on a need-to-know basis, and all access events are logged and audited regularly.

As a tk10i player, you have the following rights with respect to your personal data. These rights apply regardless of whether your account is currently active or has been closed.

• Right of access: You have the right to request a copy of the personal data tk10i holds about you. We will provide this in a structured, commonly used format within 10 business days of a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Minor corrections (such as a misspelled address) can be made directly through your account settings; significant corrections (such as a name change) require supporting documentation.
• Right to erasure: You have the right to request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations described in Section 5.
• Right to restrict processing: You have the right to request that we limit the processing of your personal data in certain circumstances — for example, while a dispute about accuracy is being resolved.
• Right to data portability: You have the right to receive the personal data you provided to us in a structured, machine-readable format, and to request that it be transferred to another service provider where technically feasible.
• Right to withdraw marketing consent: Where you have provided consent for us to send marketing communications, you may withdraw that consent at any time through your account notification settings or by contacting support at [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out before withdrawal.
• Right to object: You have the right to object to processing of your personal data where we are relying on legitimate interests as the legal basis, unless we can demonstrate compelling legitimate grounds that override your interests.

To exercise any of the above rights, contact the tk10i support team via Live Chat or by email at [email protected]. We will acknowledge your request within 48 hours and provide a full response within 10 business days. We may need to verify your identity before processing your request, to ensure that personal data is not disclosed to an unauthorised third party.

The security of your personal data is a core operational priority for tk10i. We implement a range of technical and organisational measures to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• Transport encryption: All data transmitted between your device and the tk10i platform is encrypted using TLS 1.2 or higher (256-bit SSL). This protects your login credentials, payment details, and personal information during transmission.
• At-rest encryption: Personal data stored in our databases is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the data they protect and are rotated on a scheduled basis.
• Access controls: Access to systems holding personal data is restricted to authorised personnel only, enforced through role-based access controls, multi-factor authentication for administrative accounts, and comprehensive access logging.
• Regular security audits: tk10i conducts regular internal security reviews and periodic third-party penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Firewall and intrusion detection: Our infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection systems that monitor for and respond to suspicious network activity 24 hours a day.
• Staff training: All tk10i personnel who handle personal data receive regular data protection training. Access privileges are reviewed quarterly and revoked immediately upon a staff member's departure from the organisation.

While tk10i takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You play an important role in protecting your own account by using a strong, unique password, enabling two-factor authentication, and keeping your login credentials confidential. If you suspect your account has been compromised, contact our support team immediately.

tk10i reviews this Privacy Policy at least annually and whenever there are significant changes to how we collect or process personal data, changes in applicable law, or material changes to our platform's features and services. When we make updates to this Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered players by email where the changes are material to their rights or our processing activities.
• Display a prominent on-site notice for at least 14 days following publication of a material update.

Your continued use of the tk10i platform following the publication of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised Policy, you should stop using the platform and contact us to request account closure.

Contact us about privacy: For all data protection enquiries, rights requests, or concerns about how tk10i handles your personal data, please contact our support team:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Live Chat: Available on-site 24 hours a day, 7 days a week, in both English and Bengali

We are committed to resolving all privacy-related enquiries promptly and transparently. If you are not satisfied with our response to a privacy complaint, you have the right to escalate your concern to the relevant data protection authority in your jurisdiction.