tk10b Privacy Policy

1. Information We Collect

tk10b collects personal data through several channels: information you provide directly when registering or using our services, data generated automatically through your use of the platform, and information received from third-party partners such as payment processors and identity verification services. The categories of personal data we collect are set out below.

1.1 Registration and Account Data

When you create a tk10b account, we collect your full legal name as it appears on your government-issued identification, your date of birth, your registered mobile number, and your email address. This information is required to establish your identity, verify that you meet the minimum age requirement of 18 years, and communicate with you regarding your account. You may also be asked to provide your residential address in Bangladesh (including district, upazila, and postcode) for enhanced KYC verification purposes.

1.2 Identity Verification Documents

As part of our Know Your Customer (KYC) obligations, tk10b may request copies of government-issued identity documents such as your Bangladesh National Identity Card (NID), passport, or birth certificate. Where proof of address is required, we may request a recent utility bill, bank statement, or similar document. These documents are processed solely for the purpose of verifying your identity and are stored securely in accordance with the data retention periods described in Section 6 of this policy.

1.3 Payment and Financial Data

When you make a deposit or request a withdrawal, we collect information necessary to process the transaction. This includes your mobile wallet number (for bKash, Nagad, Rocket, or Upay transactions), bank account details (for Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, or similar transfers), and card details (for Visa or Mastercard transactions, which are tokenised and never stored in full on our servers). Full payment card numbers are handled exclusively by our PCI-DSS compliant payment processor partners and are never stored on tk10b's own infrastructure.

1.4 Transactional and Betting History

We maintain records of all deposits, withdrawals, bets placed, casino game sessions, bonus claims, and promotional activity associated with your tk10b account. This data is used for account management, dispute resolution, responsible gaming monitoring, and compliance with anti-money laundering obligations.

1.5 Technical and Device Data

When you access the tk10b platform, our servers automatically collect technical information including your IP address, device type and model, operating system version, browser type and version, screen resolution, referring URL, and session timestamps. This information helps us detect fraudulent activity, optimise platform performance across different devices, and diagnose technical issues.

1.6 Communications Data

If you contact our support team via email at [email protected] or through any in-platform messaging facility, we retain a record of those communications. This includes the content of your messages, the date and time of contact, and the outcome or resolution reached. Records of support interactions are used to improve service quality and to provide a consistent experience if you contact us again about the same matter.

2. How We Use Your Data

tk10b uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed here without first seeking your consent or establishing a separate lawful basis for processing.

Purpose	Data Categories Used	Lawful Basis
Account creation and management	Registration data, contact details	Contract performance
Identity and age verification (KYC)	ID documents, date of birth, address	Legal obligation
Processing deposits and withdrawals	Payment data, financial data	Contract performance
Anti-money laundering monitoring	Transaction history, payment data	Legal obligation
Responsible gaming monitoring	Betting history, session data, account data	Legitimate interests
Fraud detection and prevention	Technical data, device data, IP address	Legitimate interests
Customer support	Communications data, account data	Contract performance
Marketing communications (where opted in)	Contact details, preferences	Consent
Platform analytics and improvement	Technical data, usage data (anonymised)	Legitimate interests

3. Legal Basis for Processing

Every use of your personal data by tk10b is founded on one of the following lawful bases. Where we rely on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

3.1 Contract Performance

The majority of data processing at tk10b is necessary for the performance of our contract with you — that is, to provide you with a functioning betting and casino account, to process your transactions, and to deliver the services you have requested. Without this processing, we cannot operate your tk10b account.

3.2 Legal Obligation

Certain processing activities are required by applicable law, including anti-money laundering regulations, KYC obligations, and record-keeping requirements applicable to online gaming platforms operating in the Bangladesh market. We cannot waive these obligations regardless of your preferences.

3.3 Legitimate Interests

We process some personal data on the basis of tk10b's legitimate business interests, where those interests are not overridden by your rights and freedoms. This includes fraud detection, platform security monitoring, responsible gaming analytics, and general business analytics conducted on anonymised or aggregated data. We conduct a balancing assessment before relying on this basis to ensure your interests are adequately protected.

3.4 Consent

Where we wish to send you direct marketing communications — such as promotional emails about seasonal offers, BPL cricket bonuses, Eid specials, or new game launches — we will seek your explicit consent before doing so. You may withdraw consent at any time by updating your communication preferences in your account settings or by contacting [email protected].

4. Cookies & Tracking Technologies

The tk10b platform uses cookies and similar technologies — including local storage, session storage, and pixel tags — to provide a functional, personalised, and secure experience. The following table describes the categories of cookies we use.

Cookie Category	Purpose	Retention
Strictly Necessary	Session management, login authentication, CSRF protection, load balancing	Session / up to 24 hours
Functional	Remembering language preference, storing betting slip state, retaining display settings	Up to 12 months
Analytics	Measuring page visits, session duration, error rates, and feature usage (anonymised data only)	Up to 24 months
Security	Fraud detection signals, device fingerprinting for anomaly detection, bot protection	Up to 6 months

Strictly Necessary cookies cannot be disabled as they are essential to the operation of the tk10b platform. All other categories of cookies may be managed through your browser settings. Most modern browsers allow you to block or delete cookies; however, disabling Functional cookies may affect certain features of your tk10b experience such as saved preferences and persistent login.

5. Data Sharing & Third Parties

tk10b does not sell, rent, or trade your personal data to any third party. We share data only in the limited circumstances described below, and only with parties who are contractually bound to handle it with appropriate security and confidentiality.

5.1 Payment Service Providers

To process your deposits and withdrawals, we share the minimum necessary payment data with our authorised payment partners, which include the operators of bKash, Nagad, Rocket, and Upay mobile financial services, as well as acquiring banks and card network processors for Visa and Mastercard transactions. These providers are permitted to use your data solely for the purpose of completing the specific transaction and are not authorised to use it for any other purpose.

5.2 Identity Verification Partners

To fulfil our KYC obligations, we may share identity document images and related personal data with third-party identity verification service providers. These providers verify the authenticity of documents and cross-reference information against relevant databases. All such providers operate under strict data processing agreements and are not permitted to retain your documents beyond the period necessary to complete verification.

5.3 Legal and Regulatory Disclosure

tk10b may be required by law to disclose personal data to government agencies, law enforcement authorities, financial intelligence units, or courts in Bangladesh or other applicable jurisdictions. Such disclosures will be made only to the extent required by law and, where permissible, we will endeavour to notify you of any such request before complying.

5.4 Business Transfers

In the event that tk10b undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the successor entity as part of that transaction. We will notify you of any such transfer via the registered email address on your account and will ensure that the receiving entity is bound by terms no less protective than those in this Privacy Policy.

6. Data Retention

tk10b retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or to comply with applicable legal, regulatory, or contractual obligations. The table below outlines our standard retention periods by data category.

Data Category	Retention Period	Basis
Account registration data	Duration of account + 5 years post-closure	Legal / AML obligation
KYC identity documents	Duration of account + 5 years post-closure	Legal / AML obligation
Transaction and payment records	7 years from transaction date	Financial regulation
Betting and gaming history	Duration of account + 3 years post-closure	Dispute resolution / contract
Support communications	3 years from last interaction	Legitimate interests
Technical / device logs	Up to 12 months	Security / fraud prevention
Marketing preferences	Until consent is withdrawn	Consent

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with an individual. Where data has been anonymised, it may be retained indefinitely for statistical and analytical purposes.

7. Your Privacy Rights

As a tk10b player, you hold a number of rights in relation to your personal data. These rights are described below. To exercise any of these rights, please contact us at [email protected] with a clear description of your request and, where identity verification is needed, a copy of a valid ID document. We will respond within 30 days of receiving a complete and valid request.

• Right of Access: You may request a copy of all personal data we hold about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data. This right does not apply where retention is required by law — for example, KYC and transaction records must be retained for the mandatory periods described above.
• Right to Restriction: You may request that we restrict the processing of your personal data while a dispute or correction request is being resolved.
• Right to Data Portability: Where processing is based on consent or contract performance, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing activities based on legitimate interests, including any direct marketing. Where you object to marketing, we will cease that use of your data immediately.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

8. Data Security Measures

tk10b implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security programme includes the following controls:

• Transport Layer Security (TLS): All data transmitted between your browser or device and the tk10b platform is encrypted using TLS 1.2 or higher. We do not support deprecated protocols such as SSL 3.0 or TLS 1.0.
• Encryption at Rest: Sensitive personal data stored on our servers — including identity documents and payment data — is encrypted using AES-256 encryption.
• Access Controls: Access to personal data within tk10b's internal systems is restricted on a strict need-to-know basis. All staff who handle personal data are subject to confidentiality obligations and receive data protection training.
• Two-Factor Authentication: Sensitive administrative actions within tk10b's internal platforms require two-factor authentication. We also make two-step login verification available to all registered players.
• Security Monitoring: Our infrastructure is continuously monitored for anomalous activity, attempted intrusions, and vulnerability exposures. Security incidents are investigated and remediated in accordance with our incident response procedures.
• Third-Party Audits: Our platform and data handling practices are subject to periodic independent security reviews to validate the effectiveness of our controls.

Despite these measures, no digital platform can guarantee absolute security. In the unlikely event of a personal data breach that is likely to result in a risk to your rights or freedoms, tk10b will notify affected players at the registered email address on file without undue delay and will take all reasonable steps to contain and remediate the breach.

8.1 Your Role in Security

You also play an important role in keeping your data secure. Use a strong, unique password for your tk10b account, enable two-step verification, and never share your login credentials with anyone. If you suspect that your account has been accessed without your authorisation, contact [email protected] immediately so that we can place a temporary hold on the account and investigate.

8.2 Changes to This Privacy Policy

tk10b reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or operational procedures. When material changes are made, we will update the effective date at the top of this document and, where the changes are significant, notify registered players via email. Your continued use of the tk10b platform after any update constitutes acknowledgement of the revised policy. We encourage you to review this page periodically.

8.3 Contact for Privacy Enquiries

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy concern, please contact our data protection team at [email protected]. All privacy enquiries are handled in English and will be acknowledged within two business days, with a full response provided within 30 days of receipt of a complete request.