Privacy Policy — tk8 Platform

tk8 is Bangladesh's premier online casino and sports betting platform, serving adult players aged 18 and above across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and throughout Bangladesh. As a platform that handles financial transactions and personal identity information, we recognise that privacy is not simply a legal obligation — it is a fundamental part of the trust that players place in tk8.

This Policy applies to all data processing activities carried out by tk8 in connection with the operation of the tk8 platform. It covers data collected through our website, account registration process, payment systems, customer support channels, and any other touchpoint through which you interact with tk8.

We are committed to collecting only the data we genuinely need, storing it securely, using it only for the purposes described in this Policy, and never selling it to third parties for commercial gain. Our approach to privacy is built on four core principles: transparency, necessity, security, and respect for your rights.

tk8 collects personal data that falls into the following categories. We only collect data that is necessary for the purposes described in this Policy.

tk8 collects personal data through the following methods:

• Direct Collection: Data you provide voluntarily when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, participating in a promotion, or responding to a survey.
• Automated Collection: Technical data collected automatically when you visit and interact with the tk8 platform, including via cookies, web beacons, server logs, and similar tracking technologies. See Section 7 for full details on our cookie practices.
• Third-Party Sources: Identity and fraud-screening data from identity verification service providers; transaction confirmation data from payment processors including bKash, Nagad, Rocket, and Upay; and risk-scoring data from fraud prevention partners. We only receive data from third parties where we have a lawful basis for doing so.
• Inferred Data: Behavioural insights derived from your gaming activity and platform interactions (for example, patterns used to identify potential problem gambling behaviour for responsible gaming purposes).

tk8 processes your personal data for the following clearly defined purposes:

• Account Management: To create, maintain, and administer your tk8 account, verify your identity, and manage your account credentials securely.
• Service Delivery: To provide access to casino games, live betting markets, cricket and sports wagering, and all other features of the tk8 platform.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment channels; to verify the source of funds where required; and to maintain accurate financial records.
• KYC & Identity Verification: To verify your age (18+ requirement), identity, and the legitimacy of your account in compliance with anti-money laundering and fraud prevention requirements.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming Compliance: To monitor gaming behaviour for signs of problem gambling, enforce deposit limits and self-exclusion orders, and support Players who seek assistance through our responsible gaming programme.
• Customer Support: To respond to your queries, complaints, and support requests; to maintain records of communications for quality assurance and dispute resolution.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have given your consent or where we have a legitimate interest in keeping you informed about relevant tk8 services. You may opt out at any time.
• Platform Improvement: To analyse aggregated usage data, identify technical issues, improve game performance, and enhance the overall user experience on the tk8 platform.
• Legal Compliance: To meet our obligations under applicable law, respond to lawful requests from regulatory or law enforcement bodies, and enforce our Terms & Conditions.

We do not use your personal data for purposes that are incompatible with those listed above. Where we intend to process your data for a new purpose, we will update this Policy and provide notice before doing so.

tk8 processes your personal data only where a valid legal basis exists. The principal legal bases we rely on are as follows:

• Performance of a Contract: Processing necessary to provide you with the tk8 platform services under our Terms & Conditions — including account creation, payment processing, game access, and customer support.
• Legal Obligation: Processing required to comply with applicable law, including age verification, identity verification, anti-money laundering checks, and responding to lawful regulatory requests.
• Legitimate Interests: Processing carried out for tk8's legitimate business interests where those interests are not overridden by your privacy rights — including fraud prevention, platform security, responsible gaming monitoring, and service improvement. We conduct a balancing test before relying on this basis.
• Consent: Where required, we rely on your freely given, specific, informed, and unambiguous consent — for example, for optional marketing communications. You may withdraw consent at any time by contacting our support team or updating your account preferences.

tk8 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your data with third parties only in the following limited circumstances:

• Payment Processors: bKash, Nagad, Rocket, Upay, and other supported payment service providers receive only the data strictly necessary to process your deposits and withdrawals. These providers are bound by their own privacy obligations and applicable financial regulations.
• Identity Verification Providers: Specialist third-party KYC and identity verification services that assist tk8 in confirming the identity and age of Players. These providers process data only under tk8's instructions and for the specified purpose.
• Fraud Prevention & Security Partners: Third-party services that assist in detecting and preventing fraudulent activity, cheating, and money laundering on the platform. Data shared is limited to technical identifiers and risk signals.
• IT & Platform Infrastructure Providers: Cloud hosting, database, and technical service providers that support the operation of the tk8 platform. All such providers are subject to contractual data protection obligations.
• Legal & Regulatory Authorities: Law enforcement agencies, regulatory bodies, courts, and other governmental authorities in Bangladesh or other applicable jurisdictions, where tk8 is required or permitted by law to disclose your data.
• Professional Advisers: Lawyers, auditors, and accountants acting in a professional capacity in connection with the operation of the tk8 business, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the tk8 business, your personal data may be transferred to the acquiring entity. We will notify you of any such transfer and the privacy implications in advance where reasonably practicable.

All third parties with whom tk8 shares personal data are required to implement appropriate technical and organisational security measures and to process data only in accordance with our instructions and applicable law.

tk8 uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, to detect fraudulent activity, and to analyse how the platform is used. The following types of cookies may be present on the tk8 platform:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, account display options, and game preferences to provide a more personalised experience.
• Analytics Cookies: Collect aggregated, anonymised data about how Players navigate the tk8 platform — including pages visited, time spent, and features used — to help us identify areas for improvement.
• Security Cookies: Used to detect and prevent fraudulent logins, bot activity, and other security threats by analysing device fingerprints and behavioural patterns.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect the functionality of the tk8 platform and may prevent you from logging in or completing transactions. tk8 does not use third-party advertising cookies or behavioural tracking cookies for the purpose of serving targeted advertisements on external websites.

tk8 retains personal data for as long as is necessary to fulfil the purposes set out in this Policy and to comply with our legal obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account being active on the tk8 platform plus a minimum of five years following account closure, to meet anti-money laundering and fraud record-keeping requirements.
• Transaction and Financial Records: Retained for a minimum of seven years following the date of the transaction, consistent with standard financial record-keeping practice.
• KYC and Identity Documents: Retained for a minimum of five years following the completion of the verification process or the closure of your account, whichever is later.
• Customer Support Communications: Retained for three years following the closure of the relevant support case, unless the matter is subject to ongoing legal proceedings.
• Technical and Log Data: Typically retained for up to 12 months from the date of collection, unless required for longer in connection with a fraud or security investigation.
• Marketing Consent Records: Retained for the duration of consent and for three years following withdrawal, to demonstrate compliance.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data (from which you cannot be identified) may be retained indefinitely for analytical and statistical purposes.

tk8 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• 256-Bit SSL Encryption: All data transmitted between your device and the tk8 platform is encrypted using industry-standard TLS/SSL protocols, ensuring that your personal and financial data cannot be intercepted in transit.
• Password Hashing: Account passwords are never stored in plain text. tk8 applies a strong one-way cryptographic hashing algorithm with salting to all stored passwords.
• Access Controls: Access to personal data within tk8's internal systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication (2FA): Two-factor authentication is available and recommended for all tk8 accounts to provide an additional layer of login security.
• Intrusion Detection & Monitoring: tk8's infrastructure is subject to continuous monitoring for anomalous activity, intrusion attempts, and data exfiltration signals.
• Secure Data Centres: Data is stored on servers hosted in secure, access-controlled facilities with physical security measures, redundancy, and regular security audits.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, tk8 will notify affected Players without undue delay and will take immediate steps to contain and remediate the breach.

As a Player whose personal data is processed by tk8, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team using the details provided in Section 14.

• Right of Access: You have the right to request a copy of the personal data that tk8 holds about you and information about how it is being used.
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data that tk8 holds about you.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to tk8's legal obligations to retain certain data (see Section 8).
• Right to Restrict Processing: You may request that tk8 limits the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that tk8 provides your personal data to you in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including direct marketing. Where you object to marketing, tk8 will cease sending marketing communications immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

tk8 will respond to all valid data subject requests within 30 days of receipt. In complex or high-volume cases, this period may be extended by a further 60 days, in which case we will notify you. There is no charge for exercising your rights unless requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

The tk8 platform does not contain links to external third-party websites for commercial or advertising purposes. All links within the tk8 platform point to internal pages within the tk8.lat domain. As a result, the risk of being redirected to a third-party site with different privacy practices through the tk8 platform is minimal.

Payment service providers such as bKash, Nagad, Rocket, and Upay operate their own applications and platforms that are subject to their own privacy policies. When you interact with a payment provider's interface to complete a deposit or withdrawal, you are subject to that provider's terms and privacy practices. tk8 is not responsible for the privacy practices of any payment provider and recommends that you review their respective policies.

The tk8 platform is strictly intended for adults aged 18 years and above. tk8 does not knowingly collect, process, or store personal data from individuals under the age of 18. If you are under 18, you must not use the tk8 platform, create an account, or provide any personal data to us.

If tk8 becomes aware that personal data has been collected from a person under the age of 18, we will take immediate steps to delete that data, close the associated account, and prevent any further access. If you believe that a minor has provided personal data to tk8, please contact our support team immediately using the details in Section 14.

tk8 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. The most current version of this Policy will always be available on the tk8 platform at tk8.lat/privacy-policy, with the effective date clearly indicated at the top of the document.

Where a material change is made to this Policy — for example, a significant new purpose for which your data will be processed, or a change in the categories of third parties with whom we share data — tk8 will provide reasonable advance notice by displaying a prominent notification on the platform or by sending a communication to the email address registered on your account.

Your continued use of the tk8 platform following the effective date of a revised Policy constitutes your acknowledgement of the changes. We encourage you to review this Policy periodically so that you remain informed about how your data is being protected.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy-related concern, please contact the tk8 privacy team through the following channels:

• Email: support@tk8.lat (plain text — not a clickable link)
• Subject Line: Please use "Privacy Request" or "Data Subject Request" in the subject line of your email to ensure it is routed to the correct team promptly.
• Live Chat: Available 24/7 via the support widget on the tk8 platform
• Response Time: Privacy and data subject requests are acknowledged within 5 business days and fully resolved within 30 days of receipt

When contacting us regarding a privacy matter, please include your registered account username, a description of your request or concern, and any relevant context to help us respond as efficiently as possible. We are committed to handling all privacy enquiries with care and professionalism.