Privacy Policy — How tk67 Collects, Uses, and Protects Your Data
Your privacy is a fundamental commitment at tk67, not a compliance checkbox. This Privacy Policy explains in plain terms what personal data we collect from Bangladeshi players, why we collect it, how we use it, and the rights you hold over your information at all times.
Privacy at a Glance
Six Core Principles Behind tk67's Privacy Approach
These cards summarise the principles that guide how tk67 handles your personal data. They are not a substitute for the full policy text — please read all sections carefully.
Data Minimisation
tk67 collects only the personal data that is strictly necessary to operate the platform, verify player identity, process transactions in BDT, and comply with applicable legal obligations. We do not collect data speculatively or unnecessarily.
No Third-Party Marketing Sales
tk67 does not sell, rent, or exchange your personal data with third-party marketing organisations. Your contact details and behavioural data will never be traded for commercial purposes without your explicit, informed consent.
SSL Encryption
All data transmitted between your device and tk67's servers is protected using industry-standard SSL/TLS encryption. This applies to login sessions, account registration, payment processing, and all in-platform communications.
Player Rights
Registered players have the right to access, correct, and in certain circumstances request deletion of their personal data. These rights can be exercised at any time by contacting the tk67 support team at the address provided in this policy.
Defined Retention Periods
tk67 retains personal data only for as long as is necessary for the purpose it was collected, or as required by applicable law. Once the retention period expires, data is securely deleted or anonymised in accordance with our internal data lifecycle procedures.
Breach Notification
In the unlikely event of a data breach that affects your personal information, tk67 will notify impacted players promptly and take immediate remedial action to contain the breach, assess its scope, and prevent recurrence.
01 Who We Are
tk67 ("the Platform", "we", "us", "our") is a VIP-focused online betting and gaming platform operated for players in Bangladesh. The platform is accessible at https://tk67.io and offers a range of products including sports betting (with a particular focus on cricket, including BPL and IPL markets), live casino games, slots, and table games.
For the purposes of data protection, tk67 acts as the data controller in respect of personal data provided by registered players and website visitors. This means we determine the purposes for which, and the manner in which, your personal data is processed.
If you have any questions about this Privacy Policy or wish to exercise any of the rights described herein, please contact our dedicated data support team at [email protected]. We aim to respond to all data-related enquiries within five business days (Bangladesh Standard Time, UTC+6).
02 Data We Collect
tk67 collects the following categories of personal data from players and site visitors. The specific data collected depends on whether you are a visitor, a registered player, or a verified VIP member of the platform.
| Category | Examples | Collected From |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID or passport number | Registration form, KYC verification |
| Contact Data | Mobile number, email address, city of residence (e.g., Dhaka, Chittagong, Sylhet) | Registration form, account settings |
| Financial Data | bKash/Nagad/Rocket/Upay account references, transaction amounts in BDT, deposit and withdrawal history | Payment processor, transaction records |
| Technical Data | IP address, browser type and version, device type, operating system, session tokens | Automatic collection via platform |
| Usage Data | Pages visited, games played, bet amounts and frequency, login timestamps, session duration | Platform analytics systems |
| Communications Data | Support chat transcripts, emails sent to support, feedback submissions | Support interactions |
| Verification Documents | Photographs of national ID, utility bills, selfies submitted for identity checks | KYC verification process |
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification purposes.
03 How We Collect Data
tk67 collects personal data through the following channels:
- Direct interactions: Data you provide when creating an account, completing our Know Your Customer (KYC) process, making deposits or withdrawal requests, communicating with our support team, or participating in promotions.
- Automated technologies: As you navigate and use the tk67 platform, we automatically collect technical and usage data through cookies, server logs, and similar tracking technologies. This data is collected to ensure platform stability, detect fraud, and improve user experience.
- Payment service providers: When you make a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, we receive transaction confirmation data from the respective payment provider. We do not store full payment account credentials on our servers.
- Third-party identity verification providers: Where required for enhanced KYC checks, we may receive data from third-party identity verification services. These providers are contractually bound to process data only as instructed by tk67.
- Analytics platforms: Aggregated, anonymised behavioural data may be collected through analytics tools to help us understand how players use the platform and improve our product offering.
04 Purpose & Legal Basis for Processing
tk67 processes your personal data for the following purposes, each underpinned by a clear legal basis:
| Purpose | Legal Basis |
|---|---|
| Creating and managing your player account | Performance of a contract |
| Processing deposits and withdrawals in BDT | Performance of a contract |
| Verifying player identity and age (21+ compliance) | Legal obligation; legitimate interest |
| Detecting and preventing fraud and money laundering | Legal obligation; legitimate interest |
| Providing customer support services | Performance of a contract; legitimate interest |
| Sending account-related transactional notifications | Performance of a contract |
| Sending promotional communications (where opted in) | Consent |
| Improving platform performance and user experience | Legitimate interest |
| Complying with applicable legal and regulatory obligations | Legal obligation |
Where we rely on your consent as the legal basis for processing (such as for promotional emails), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, contact [email protected] or update your communication preferences within your account settings.
05 Data Sharing and Disclosure
tk67 does not sell your personal data to any third party. We may share your data in the following limited circumstances, always with appropriate safeguards in place:
- Payment processors: bKash, Nagad, Rocket, and Upay receive only the minimum transaction data required to process your deposit or withdrawal. These providers operate under their own privacy policies and are independently regulated in Bangladesh.
- Identity verification providers: Third-party KYC service providers may receive copies of identity documents submitted by players solely for the purpose of verifying identity. These providers are bound by strict data processing agreements.
- Technology and infrastructure providers: Hosting, security monitoring, and analytics providers may have access to platform data in the course of providing their services to tk67. All such providers are contractually required to maintain confidentiality and process data only as instructed.
- Legal and regulatory authorities: tk67 will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of tk67, its players, or third parties.
- Business transfers: In the event of a merger, acquisition, or sale of the platform, player data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained. Players will be notified of any such transfer in advance where practicable.
06 Cookies & Tracking Technologies
tk67 uses cookies and similar tracking technologies to ensure the platform functions correctly, to detect security threats, and to analyse how players interact with our services. The following types of cookies may be set when you use the tk67 platform:
- Essential cookies: These are strictly necessary for the platform to operate. They enable core functions such as login session management, bet slip persistence, and security token validation. These cookies cannot be disabled without rendering the platform non-functional.
- Analytics cookies: These cookies allow us to collect aggregated, anonymised data about how players navigate the platform, which games they engage with most, and where technical issues arise. This data is used exclusively to improve the platform experience.
- Preference cookies: These remember your account settings and preferences (such as displayed language and notification choices) to deliver a more personalised experience on return visits.
- Security cookies: Used to detect and prevent fraudulent activity, including identifying anomalous login patterns, unusual betting behaviour, or suspected bot activity on the platform.
You can manage your cookie preferences through your browser settings. Note that disabling essential cookies will significantly impair your ability to use the tk67 platform. For detailed information on managing cookies in your specific browser, please consult your browser's help documentation.
07 Data Retention
tk67 retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any legal or regulatory requirements that mandate a longer retention period. Our standard retention periods are as follows:
- Account data: Retained for the duration of the account's active life, plus five years following permanent account closure, to meet anti-money laundering and fraud prevention obligations.
- Transaction records: All deposit and withdrawal records denominated in BDT are retained for a minimum of seven years from the date of the transaction in accordance with financial record-keeping standards.
- KYC and identity verification documents: Retained for five years from the date of submission or from the date of account closure, whichever is later.
- Support communications: Chat transcripts and email correspondence are retained for three years from the date of the interaction.
- Technical and usage data: Typically anonymised or deleted within 24 months of collection unless required for active fraud investigations.
- Marketing consent records: Retained for the duration of the consent plus three years to provide an auditable record of consent status.
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised using industry-standard data destruction procedures. Anonymised or aggregated statistical data derived from personal data may be retained indefinitely for business analysis purposes, as it no longer constitutes personal data.
08 Data Security
tk67 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- SSL/TLS encryption: All data in transit between your device and our servers is encrypted using current SSL/TLS protocols. This applies to login sessions, registration, payment flows, and all in-platform interactions.
- Access controls: Access to personal data within tk67's systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required to perform their designated role.
- Secure password storage: Player passwords are stored using industry-standard hashing algorithms. tk67 never stores passwords in plain text and will never ask you to share your password via email, chat, or any other channel.
- Monitoring and intrusion detection: Our platform infrastructure is monitored continuously for suspicious activity, unauthorised access attempts, and potential security vulnerabilities.
- Regular security reviews: tk67 conducts periodic reviews of its data security practices and updates its measures in response to emerging threats and technological developments.
Despite our best efforts, no online platform can guarantee absolute security. Players are strongly encouraged to use a strong, unique password for their tk67 account, to enable any available two-factor authentication, and to report any suspected unauthorised access to support immediately at [email protected].
09 Your Data Rights
As a registered player on the tk67 platform, you hold the following rights in respect of your personal data. These rights may be exercised at any time by contacting [email protected]:
Right of Access
Request a copy of all personal data we hold about you, along with information on how it is being processed.
Right to Rectification
Request correction of any inaccurate or incomplete personal data we hold about you.
Right to Erasure
Request deletion of your personal data where there is no compelling reason for its continued processing, subject to legal retention obligations.
Right to Restrict Processing
Request that we limit how we use your data while a dispute or verification request is being resolved.
Right to Portability
Request your personal data in a structured, machine-readable format for transfer to another service provider.
Right to Object
Object to the processing of your data where we rely on legitimate interest as the legal basis, including for direct marketing.
We will respond to all data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it. We may need to verify your identity before fulfilling a data rights request to protect against unauthorised access to another player's data.
10 Children and Minors
The tk67 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data relating to individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, that data will be deleted immediately and the associated account will be closed without notice.
Parents and guardians who believe that a minor may have registered on the tk67 platform or submitted personal data without authorisation are encouraged to contact our support team immediately at [email protected]. We take all such reports seriously and will act promptly to investigate and resolve the matter.
tk67 applies robust age verification procedures at the point of registration and during the KYC process to enforce this restriction. These procedures include document-based identity verification requiring submission of a government-issued ID confirming date of birth.
11 Updates to This Privacy Policy
tk67 reviews this Privacy Policy on a regular basis and reserves the right to update it at any time to reflect changes in our data practices, legal obligations, or platform services. The effective date displayed at the top of this page indicates when the current version was last revised.
Where updates are material — meaning they significantly affect how we collect or use your personal data or your rights in relation to that data — we will notify registered players by email to the address registered on their account prior to the changes taking effect. The updated policy will also be posted prominently on this page.
Continued use of the tk67 platform following notification of a material policy update constitutes acceptance of the revised Privacy Policy. If you do not agree with the updated policy, you should discontinue use of the platform and contact support to discuss your account closure options.
12 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which tk67 handles your personal data, please reach out to our support team. All data-related communications are handled confidentially and with priority.
- Data Support Email: [email protected]
- Response Time: Within 5 business days for data rights requests; within 2 hours for urgent security reports
- Support Hours: 24 hours a day, 7 days a week
- Time Zone: Bangladesh Standard Time (BST, UTC+6)
For information about our approach to responsible gaming and player protection tools, please visit our Responsible Gaming page. For answers to common questions about account management, payments, and platform rules, visit our FAQ page. For the full terms governing your use of the platform, refer to our Terms & Conditions.
Ready to Experience tk67?
Now that you understand how we protect your data, explore the full range of cricket betting markets, live casino games, and slot titles available exclusively on the tk67 platform.