Privacy Policy — How tk70 Protects Your Data

§ 1 — Data Collection

Information We Collect

tk70 collects personal information through several channels: directly from you during account registration and KYC, automatically through your interaction with the Platform, and in limited cases from third-party service providers involved in payment processing or fraud prevention. We collect only the information that is genuinely necessary to deliver our services securely and in compliance with our operational obligations.

tk70 does not intentionally collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for age and identity verification under our KYC obligations. Where such data is incidentally provided — for example, a photograph submitted for KYC — it is used solely for verification purposes and is not processed for any other analytical or commercial purpose.

§ 2 — Data Use

How We Use Your Information

tk70 uses the personal data we collect for specific, legitimate purposes. We do not sell your personal data to any third party. Every processing activity is carried out with a defined purpose, and we retain data only for as long as that purpose requires. The following describes the primary purposes for which your data is processed:

Where tk70 intends to use your data for a purpose materially different from those listed above — for example, for a new product or service category — we will inform you and, where required, seek your consent before commencing that processing activity.

§ 3 — Data Sharing

Data Sharing & Third Parties

tk70 does not sell, rent, or trade your personal data. We share information only where it is strictly necessary to operate the Platform, fulfil our legal obligations, or protect the safety and integrity of our services. The following categories of third parties may receive limited personal data from tk70 in the course of normal operations:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the minimum financial data necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and data security standards. tk70 does not store full card numbers or mobile banking PINs on its own servers.
• Identity Verification Services: Third-party KYC and identity verification providers may receive copies of your identity documents and personal details for the sole purpose of confirming your identity and age in connection with our compliance obligations. These providers are bound by strict confidentiality agreements with tk70.
• Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier in order to load and operate their games within the tk70 Platform. These studios do not receive your full name, contact details, or financial information.
• Fraud Prevention & Security Partners: Specialist fraud detection service providers may receive technical data — including IP addresses, device identifiers, and behavioural signals — to help identify suspicious activity, multi-accounting, and potential security breaches. All such sharing is conducted under data processing agreements that bind partners to the same security standards we apply internally.
• Legal & Regulatory Authorities: tk70 may disclose personal data to law enforcement agencies, regulatory bodies, or other governmental authorities where required to do so by applicable law, court order, or regulatory direction. We will not disclose data beyond what is legally required in such circumstances.
• Business Transfers: In the event of a merger, acquisition, or transfer of all or part of tk70's business, player data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy implications before it takes effect.

§ 4 — Cookies

Cookies & Tracking Technologies

tk70 uses cookies and similar browser-based tracking technologies to operate the Platform effectively, remember your preferences, and analyse how players interact with the site. A cookie is a small text file placed on your device by your browser when you visit the Platform. Cookies do not contain executable code and cannot access other files on your device.

You can manage or disable non-essential cookies through your browser settings at any time. The method varies by browser — consult your browser's help documentation for instructions. Please note that disabling essential cookies will prevent you from logging in to your Player Account and using core Platform features. Disabling functional cookies will mean your preferences are not saved between sessions.

tk70 does not use cookies to serve third-party advertising on external websites, and we do not participate in cross-site advertising networks or retargeting programmes that track your activity outside of the tk70 Platform.

§ 5 — Security & Retention

Data Security & Retention

tk70 applies industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• TLS/SSL Encryption: All data transmitted between your device and the tk70 Platform is encrypted using Transport Layer Security (TLS) with a minimum of 256-bit encryption. This applies to account login, payment processing, and all other data exchanges.
• Encrypted Data Storage: Sensitive personal data — including identity documents submitted for KYC and financial records — is stored in encrypted form on secured servers. Access to these data stores is restricted to authorised personnel on a strict need-to-know basis.
• Access Controls: tk70 operates role-based access control (RBAC) internally, ensuring that individual team members can only access the player data categories required for their specific operational function. All internal data access events are logged and audited.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts via their registered Bangladeshi mobile number. All internal administrative access to player data systems requires multi-factor authentication without exception.
• Regular Security Reviews: tk70 conducts periodic internal security reviews and vulnerability assessments of the Platform and its data infrastructure. Where vulnerabilities are identified, remediation is prioritised and tracked to closure.

Data Retention Periods

tk70 retains personal data for the period necessary to fulfil the purpose for which it was collected, after which it is securely deleted or anonymised. General retention guidelines are as follows:

• Active Account Data: Retained for the full duration of your Player Account's active status plus a minimum post-closure period required for AML compliance and dispute resolution purposes.
• KYC Documents: Identity verification documents are retained for a minimum of five years from the date of submission, in line with standard anti-money-laundering record-keeping obligations.
• Transaction Records: Financial transaction records — including deposits, withdrawals, and wager histories — are retained for a minimum of five years from the date of each transaction.
• Communication Records: Support tickets, live chat transcripts, and email correspondence are retained for up to three years from the date of the last message in a given conversation thread.
• Analytics Data: Aggregated, anonymised analytics data may be retained indefinitely as it cannot be used to identify individual players.

§ 6 — Your Rights

Your Privacy Rights

As a player on tk70, you hold a set of rights in relation to the personal data we hold about you. tk70 is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, contact our support team at [email protected] (plain text — not a clickable link) with the subject line "Data Rights Request". We aim to respond to all data rights requests within 30 days of receipt.

Please note that certain rights are subject to limitations. For example, the right to erasure cannot be applied to transaction records that tk70 is legally required to retain for AML compliance. Where a request cannot be fulfilled in full, tk70 will explain the reason clearly and identify what partial action can be taken.

You also have the right to withdraw any consent you have previously given to tk70 for a specific processing activity at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal. Where you withdraw consent for processing that is necessary for a core Platform service, this may result in the limitation or closure of your Player Account.

§ 7 — Minors

Minors & Age Verification

As part of our KYC process, every player who registers on tk70 is subject to age verification. We require a valid government-issued identity document — such as a Bangladesh National Identity Card (NID) or passport — that clearly confirms the player's date of birth. No withdrawal request will be processed until age verification has been successfully completed.

If tk70 discovers or reasonably suspects that a Player Account has been created by or used by an individual under 18 years of age, we will immediately suspend the account, freeze all associated balances, and commence an investigation. If the suspicion is confirmed, the account will be permanently closed, all funds will be retained pending investigation, and the matter may be referred to relevant authorities. Parents or guardians who believe a minor has accessed tk70 should contact us immediately at [email protected] so we can take prompt action.

tk70 strongly encourages parents and guardians of young people in Bangladesh to install parental control software on shared devices to prevent minors from accessing gambling websites. Freely available tools such as device-level content filtering and browser-based parental controls can provide an effective first line of defence.

§ 8 — Updates & Contact

Policy Updates & Contact

tk70 reviews this Privacy Policy periodically and reserves the right to update it to reflect changes in our data practices, operational requirements, or applicable legal standards. The effective date shown at the top of this page will be updated whenever a material change is made. For significant changes — particularly those affecting how your personal data is used or shared — tk70 will notify registered players via the email address associated with their Player Account at least 14 days before the changes take effect.

Your continued use of the tk70 Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you should cease using the Platform and may request account closure by contacting our support team.

For all privacy-related enquiries — including data rights requests, questions about this policy, or concerns about how your data has been handled — please contact the tk70 Data Support team. Our contact details are as follows:

• Email: [email protected] (plain text — not a clickable link). Please use the subject line "Privacy Enquiry" or "Data Rights Request" for faster routing.
• Response Time: We aim to acknowledge all privacy-related enquiries within 48 business hours (BST) and to provide a substantive response within 30 days of receipt.
• Support Hours: Our support team is available 24/7 via live chat on the Platform. Email responses are provided within 2–6 hours during peak hours (BST, UTC+6).
• Language: All privacy communications are handled in English, consistent with the language of this Platform.

Last updated: January 2026 (BST)