Privacy Policy — tk972 Data Protection

tk972 collects personal information through several channels: directly from you when you register an account or interact with the platform; automatically as you navigate and use the platform; and, where necessary, from trusted third-party sources for identity verification and fraud prevention purposes. The categories of personal data we collect are set out below.

1.1 Registration & Account Data

When you create a tk972 account, we collect the following information to establish and administer your account:

• Full legal name, as it appears on your government-issued identification document;
• Date of birth, collected for the purpose of confirming that you are 18 years of age or older;
• Residential address in Bangladesh (street, city, and district);
• Mobile phone number and/or email address for account communication and security alerts;
• Chosen username and a securely hashed version of your account password (we never store passwords in plain text);
• Preferred currency (Bangladeshi Taka, BDT) and account language preference.

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to confirm the age and identity of account holders before withdrawals are processed, we may collect:

• A copy of your National Identity Card (NID) issued by the Bangladesh Election Commission, or a valid Bangladesh passport;
• A recent proof-of-address document (utility bill, bank statement) no older than three months;
• In higher-risk cases or for enhanced due diligence, source-of-funds documentation to satisfy anti-money laundering requirements.

All KYC documents submitted to tk972 are handled with strict confidentiality, stored in encrypted form, and used exclusively for identity verification and regulatory compliance purposes.

1.3 Financial Transaction Data

When you make a deposit or withdrawal on the tk972 platform, we record transaction details including the payment method used (such as bKash, Nagad, Rocket, Upay, Visa, or Mastercard), transaction amount in BDT, transaction timestamp, and the transaction reference number issued by your payment provider. We do not store full card numbers, bKash PINs, or any other primary authentication credentials for payment instruments — these are handled exclusively by our certified payment processing partners.

1.4 Platform Usage & Behavioural Data

As you interact with the tk972 platform, we collect technical and behavioural data including:

• IP address and approximate geographic location (derived from IP, used for security and jurisdictional compliance);
• Device type, operating system, and browser version;
• Session start and end times, pages visited, and features accessed;
• Betting and gaming activity, including wager amounts, game selections, and win/loss records — retained for responsible gaming monitoring and dispute resolution;
• Customer support interaction records, including live chat transcripts and support ticket histories.

Data Category	Collection Method	Primary Purpose
Registration details	Direct input at signup	Account creation & communication
KYC identity documents	Document upload via Cashier	Age & identity verification, AML compliance
Financial transaction records	Automated via payment gateway	Payment processing, fraud prevention
Platform usage data	Automated logging	Security, responsible gaming, analytics
Support interaction records	Live chat & ticket system	Dispute resolution, quality assurance

tk972 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share personal data with external parties only in the specific, limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

Payment Processing Partners

To process deposits and withdrawals, tk972 shares relevant transaction data with certified payment service providers including bKash, Nagad, Rocket, Upay, and international card networks. These partners receive only the transaction data they need to authorise and complete the payment in question. All payment partners are bound by contractual data processing obligations and are required to implement security standards no less rigorous than those applied by tk972 itself.

Identity Verification & KYC Service Providers

tk972 may use specialist third-party identity verification platforms to assist with KYC document authentication. Where this occurs, the KYC service provider acts as a data processor on behalf of tk972 under a formal data processing agreement that restricts the use of your data to the specific verification task and prohibits any secondary use.

Game Software Providers

Games on the tk972 platform are provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. These providers may receive anonymised session tokens and game round data to support game integrity, RNG certification, and dispute resolution. They do not receive your name, contact details, or financial data in a form that identifies you personally.

Legal & Regulatory Authorities

tk972 may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where we are legally required to do so — for example, in connection with a criminal investigation, a court order, or a legally mandated anti-money laundering report. Such disclosures are made strictly within the bounds of applicable law.

Business Transfers

In the event that tk972 undergoes a merger, acquisition, or sale of substantially all of its assets, personal data held by tk972 may be transferred to the successor entity as part of that transaction. Players will be notified of any such transfer and of any resulting material changes to this Privacy Policy in advance of the transfer taking effect, to the extent permitted by applicable law.

tk972 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:

• 256-bit SSL/TLS encryption for all data in transit between player devices and the tk972 platform infrastructure;
• Encrypted storage for all sensitive personal data held at rest, including KYC documents and payment method references;
• Access controls that restrict access to personal data to only those tk972 staff members who require it to perform their designated duties, with access logged and audited;
• Regular penetration testing and security audits conducted by independent specialists to identify and remediate vulnerabilities;
• Two-factor authentication available to all account holders as an additional layer of login security, strongly recommended for all tk972 accounts;
• Bcrypt password hashing — passwords are never stored in plain text; only a one-way cryptographic hash is retained.

Data Retention Periods

tk972 retains personal data for the periods set out below, after which data is securely deleted or anonymised unless a longer retention period is required by applicable law:

• Active account data: Retained for the lifetime of the active account plus a minimum of five years following account closure, to satisfy anti-money laundering record-keeping obligations.
• KYC identity documents: Retained for a minimum of five years following the completion of the verification process, or longer if required by specific regulatory obligations applicable at the time of collection.
• Financial transaction records: Retained for a minimum of six years following the date of the transaction.
• Customer support records: Retained for three years following the resolution of the relevant support interaction or dispute.
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period thereafter as evidence of the consent having been given.

The tk972 platform is strictly intended for use by adults aged 18 years and older. tk972 does not knowingly collect, store, or process personal data belonging to individuals under the age of 18. Age verification is a mandatory step in the account lifecycle, and any account found to belong to an underage individual will be immediately suspended, with the matter escalated for review.

If you are a parent or guardian and you believe that a minor in your household has accessed the tk972 platform and provided personal information without your knowledge, please contact our support team immediately via live chat so that we can take appropriate action to remove the data and close the account. tk972 will act on such notifications as a matter of priority.

tk972 strongly recommends that parents and guardians make use of device-level parental control software to restrict access to online gambling platforms. Parental controls are available on all major smartphone operating systems used in Bangladesh, including Android and iOS, and can be configured through the device settings or through third-party parental control applications.