tk17 Privacy Policy

Introduction

This Privacy Policy (the "Policy") is issued by tk17 (the "Platform", "we", "us", or "our") and applies to all personal data collected from individuals who register for an account, visit the tk17 website at tk17.io, or interact with any of the platform's services, features, or communications. The Policy forms part of the wider agreement between tk17 and its users, read alongside the Terms & Conditions available at tk17.io/terms-conditions.

By accessing the tk17 platform, completing the registration process, or submitting any personal information to us, you acknowledge that you have read and understood this Policy and that you consent to the collection, use, storage, and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you must discontinue use of the platform immediately.

tk17 is committed to maintaining the trust of every member of its community across Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, Cox's Bazar, and beyond. We treat every data point we hold as a responsibility, not an asset to be exploited. This Policy sets out that commitment in clear, plain terms.

Data We Collect

tk17 collects personal data in two broad categories: data you provide directly, and data collected automatically during your use of the platform. The following table summarises both categories in detail.

tk17 does not collect sensitive special-category personal data such as biometric data, racial or ethnic origin, political opinions, religious beliefs, or health data except where explicitly required by regulatory identity verification standards, in which case such data is handled with the highest level of protection and is not retained beyond the minimum legally required period.

How We Collect Data

Personal data is collected through the following channels and mechanisms:

• Direct submission: Data you provide when completing the registration form, the KYC verification process, deposit or withdrawal requests, customer support enquiries, or feedback submissions.
• Automated technical collection: When you visit tk17.io, our servers automatically log your IP address, browser type, device type, operating system, referring URL, and the pages you access. This is standard practice for all web platforms.
• Cookies and similar technologies: tk17 uses first-party cookies, session tokens, and local storage to maintain your login session, remember your account preferences, and measure platform performance. See Section 7 for full details on our cookie practices.
• Payment processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, or another supported method, the relevant payment provider shares transaction confirmation data with tk17 to credit your account. tk17 does not receive or store your full mobile banking PIN or full card number.
• Third-party game providers: Game providers such as Evolution Gaming, Pragmatic Play, and Spribe may share session data, bet records, and game outcome logs with tk17 for the purpose of account settlement and dispute resolution.
• Identity verification partners: Where tk17 uses a third-party KYC or identity verification provider, that provider will process your submitted documents and return a verification status to tk17. The raw document images are stored in accordance with the retention schedule in Section 8.

How We Use Your Data

tk17 uses the personal data it collects for the following specific purposes. We do not use data for any purpose not listed here without first seeking your consent or updating this Policy.

• Account creation and management: To register your account, verify your identity, maintain your account settings, and enable you to log in securely.
• Payment processing: To facilitate deposits and withdrawals via your chosen payment method, to reconcile transaction records, and to investigate and resolve payment disputes.
• Fraud prevention and anti-money laundering: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Regulatory compliance: To fulfil Know Your Customer (KYC) obligations and any other applicable legal or regulatory requirements.
• Service delivery and personalisation: To deliver the betting and gaming services you have requested, to personalise your in-platform experience based on your stated preferences, and to recommend content relevant to your interests.
• Responsible gaming: To monitor account activity for indicators of problem gambling behaviour, to apply any self-imposed limits or exclusions you have set, and to proactively reach out where our systems flag a concern.
• Customer support: To respond to your enquiries, resolve disputes, and maintain a record of our communications for quality assurance.
• Platform security and stability: To detect and respond to technical threats, system abuse, DDoS activity, and unauthorised access attempts.
• Marketing communications (where consented): To send you promotional offers, bonus notifications, and platform updates by email or push notification, where you have opted in to receive such communications. You may withdraw this consent at any time.
• Analytics and improvement: To analyse usage patterns across the platform, identify areas for improvement, measure the effectiveness of our features, and make data-informed product decisions.

Legal Basis for Processing

tk17 processes your personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to fulfil the contract between you and tk17 — specifically, operating your account, processing payments, delivering gaming services, and managing withdrawals. Without this processing, tk17 cannot provide its services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, KYC verification requirements, and responses to lawful requests from courts or law enforcement authorities.
• Legitimate interests: Processing necessary to pursue tk17's legitimate business interests, provided those interests do not override your own rights and interests. This includes fraud detection, platform security, responsible gaming monitoring, and internal analytics.
• Consent: Processing for which tk17 has obtained your explicit consent, primarily marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Where processing is based on legitimate interests, tk17 has conducted a balancing assessment to confirm that those interests do not disproportionately affect your privacy rights. If you wish to review the outcome of any such assessment, please contact us at [email protected].

Data Sharing & Third Parties

tk17 does not sell personal data. We do not share your personal information with any third party for that party's own marketing purposes. The limited circumstances in which your data may be shared with third parties are described below:

• Payment providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard receive only the data necessary to process your specific transaction. These providers operate under their own privacy policies and are subject to their own regulatory frameworks.
• Game providers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi receive session identifiers and account references necessary to operate their games within the tk17 environment. These providers do not receive your full identity data.
• Identity verification providers: Where a third-party KYC provider is used, your submitted identity documents and selfie images are processed by that provider under strict contractual data processing terms. The provider acts as a data processor on our behalf and is not permitted to use your data for its own purposes.
• Fraud and security services: tk17 may share technical identifiers (such as IP addresses and device fingerprints) with fraud detection and cybersecurity service providers to protect the integrity of the platform.
• Legal and regulatory authorities: tk17 will disclose personal data to courts, law enforcement agencies, or regulatory authorities where required to do so by law, or where we believe in good faith that such disclosure is necessary to protect the rights, safety, or property of tk17, our users, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or a material portion of tk17's assets, user data may be transferred to the acquiring entity as part of that transaction. Users will be notified of any such transfer and the applicable data handling practices of the new entity prior to the transfer taking effect.

Cookies & Tracking Technologies

tk17 uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, and gather analytics data. The following categories of cookies may be present on the tk17 platform:

• Strictly necessary cookies: These are essential to the operation of the platform. They enable core functions such as user authentication, session management, and security token validation. The platform cannot function without these cookies and they do not require your consent.
• Functional cookies: These remember your preferences — such as your preferred language, display settings, and responsible gaming configuration — to personalise your experience on return visits.
• Analytics cookies: These collect anonymised data on how visitors interact with the platform, including which pages are visited most frequently, how long sessions last, and where users navigate from. This data helps us improve the platform experience. Analytics cookies require your consent.
• Marketing cookies: Where you have consented to receive marketing communications, cookies may be used to track whether you have opened or acted on a promotional communication, enabling us to measure campaign effectiveness and avoid sending you irrelevant offers.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use core platform features, including logging in to your account. Disabling functional or analytics cookies will not prevent you from accessing games or making transactions.

tk17 does not use third-party advertising networks or permit third-party ad trackers to place cookies on the tk17 domain. Our cookie usage is strictly limited to the operational, functional, and analytics purposes described above.

Data Retention

tk17 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention guidelines apply:

Upon expiry of the applicable retention period, personal data is either securely deleted using cryptographic erasure methods or permanently anonymised so that it can no longer be linked to any identifiable individual. Where data cannot be immediately deleted due to ongoing legal proceedings or regulatory inquiries, it will be isolated from active processing systems and flagged for deletion once the constraint is lifted.

Security Measures

tk17 implements a layered technical and organisational security framework to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures in place include:

• TLS/SSL encryption: All data transmitted between your device and the tk17 platform is encrypted using Transport Layer Security (TLS 1.2 or higher). This applies to all web sessions, API calls, and payment communications.
• Encryption at rest: Sensitive personal data fields, including identity documents and financial records, are encrypted using AES-256 encryption when stored in our databases.
• Access controls: Access to personal data within tk17's systems is restricted on a strict need-to-know basis. Staff access permissions are role-based, regularly reviewed, and tied to individual accountability.
• Password security: User account passwords are stored as salted cryptographic hashes. tk17 staff cannot view your password in plain text. We strongly encourage users to choose unique, strong passwords and to enable any available two-factor authentication features.
• Intrusion detection: Our systems are monitored 24/7 for anomalous access patterns, unusual transaction volumes, and indicators of compromise by our security operations team.
• Penetration testing: tk17 conducts periodic penetration testing and vulnerability assessments of its platform infrastructure to proactively identify and remediate security weaknesses before they can be exploited.
• Incident response: In the event of a confirmed data breach that poses a risk to users, tk17 will notify affected individuals and relevant authorities as quickly as practicable, and no later than 72 hours from the point of confirmed discovery.

Your Rights

As a user of the tk17 platform, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please submit a written request to [email protected]. We will acknowledge your request within 5 business days and fulfil it within 30 calendar days.

• Right of access: You have the right to request a copy of all personal data tk17 holds about you, together with information on how it is being used, where it came from, and with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to erasure ("right to be forgotten"): You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing was unlawful. This right is subject to overriding legal retention requirements — for example, financial records must be retained for the period specified in Section 8.
• Right to restrict processing: You may request that we temporarily suspend active processing of your data where you contest its accuracy, where the processing is unlawful but you prefer restriction to deletion, or where we no longer need it but you require it for legal claims.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object to marketing: You may object to the processing of your data for direct marketing purposes at any time, and processing for that purpose must cease immediately upon receipt of your objection.

Children's Privacy

The tk17 platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect, store, or process personal data relating to any person under the age of 21. The registration process includes a mandatory date-of-birth field and age verification check designed to prevent underage registration.

If tk17 becomes aware that personal data has been collected from a person under the age of 21, that data will be immediately and permanently deleted, the associated account will be closed, and all transactions linked to that account will be voided in accordance with our Terms & Conditions. Any balance held in such an account will be returned net of bonuses received.

Parents or guardians who believe that a person under 21 in their care has registered a tk17 account are urged to contact us immediately at [email protected]. We will investigate and act promptly, and we cooperate fully with parental requests to close any underage account.

Third-Party Links

The tk17 platform may contain links to game provider portals, payment provider interfaces, and other third-party services that are necessary for platform operation. These third-party environments operate under their own independent privacy policies and data handling practices, which are entirely outside tk17's control.

tk17 is not responsible for the privacy practices or content of any third-party service to which a link is provided. We encourage you to review the privacy policy of any third-party service before submitting personal data to it. The presence of a link to a third-party service on the tk17 platform does not constitute an endorsement of that party's data handling practices.

Policy Amendments

tk17 reserves the right to amend, update, or replace this Privacy Policy at any time. Changes may be made to reflect updates in applicable law or regulation, changes to our data processing practices, the introduction of new platform features, or feedback from users and data protection advisors.

When a material change is made to this Policy, tk17 will notify registered users by email to the address associated with their account and by publishing a prominent notice on the tk17 website for a minimum of 30 days following the change. The "Last Updated" date at the top of this document will be revised to reflect the date on which the amendment took effect.

Your continued use of the tk17 platform following notification of a Policy amendment constitutes your acceptance of the revised terms. If you do not agree with the amended Policy, you must cease using the platform and may request account closure and data deletion in accordance with the rights described in Section 10. tk17 will retain a version history of all prior editions of this Policy, which are available upon request.

Contact & Data Requests

If you have any questions, concerns, or complaints relating to this Privacy Policy or to the way in which tk17 handles your personal data, you are encouraged to contact our support team directly. We take all privacy-related enquiries seriously and are committed to resolving them promptly and transparently.

You may reach the tk17 data support team through the following channels:

• Email: [email protected] — for all data rights requests, privacy concerns, and policy enquiries.
• Live Chat: Available 24 hours a day, 7 days a week via the tk17 platform interface.
• WhatsApp: +880 1700 000000 — for urgent account security concerns.
• Response time: All privacy-related email enquiries receive an acknowledgement within 5 business days and a substantive response within 30 calendar days. Live chat responses are immediate during staffed hours.

When submitting a data rights request by email, please include the following information to help us process your request efficiently:

1. Your full name as registered on your tk17 account.
2. Your registered email address.
3. The specific right you wish to exercise (e.g., access, rectification, erasure).
4. Any relevant details that will help us locate the specific data in question.

tk17 handles all data rights requests free of charge for standard requests. Where a request is manifestly unfounded or excessive — particularly if it is repetitive in nature — tk17 reserves the right to either charge a reasonable administrative fee or decline to act on the request, providing written reasons for that decision in either case.