Privacy Policy — tk999bat

1. Data We Collect

1.1 Registration Data

When you create a tk999bat account, we collect the following information as part of the registration process:

• Full legal name
• Date of birth (for age verification)
• Email address
• Mobile phone number
• Preferred currency (Bangladeshi Taka, BDT)
• Username and encrypted password hash

This information is required to open your account. Incomplete or inaccurate registration data may result in your account being suspended pending verification.

1.2 Identity Verification (KYC) Data

To comply with know-your-customer obligations and prevent underage gambling, we may request additional identity documentation at any stage of your account lifecycle. This may include:

• Government-issued national ID card (NID), passport, or driving licence (front and back)
• Proof of address (utility bill, bank statement, or similar document dated within 90 days)
• Selfie photograph taken alongside your identity document
• Payment method verification (screenshot of bKash or Nagad account registered in your name)

KYC documents are stored in an encrypted document management system and are accessible only by authorised personnel involved in the verification process.

1.3 Transaction and Financial Data

tk999bat records all financial activity on your account, including:

• Deposit amounts, timestamps, and payment method identifiers (e.g., masked bK ash/Nagad account reference)
• Withdrawal requests, amounts, processing status, and destination payment method
• Bonus credits, wagering activity, and promotional redemptions
• Game wager history, win/loss records, and session timestamps

Financial records are retained for a minimum of five years in accordance with standard anti-money-laundering record-keeping practice. These records are not used for any purpose beyond account management, fraud prevention, and regulatory compliance.

1.4 Technical and Device Data

When you access tk999bat, our servers automatically collect certain technical information from your device and browser, including:

• IP address and approximate geographic location (country and city level)
• Browser type and version, operating system, and device model
• Referring URL and pages visited within the Platform
• Session duration, click-path data, and feature interaction logs
• Time zone setting (used to display match times in Bangladesh Standard Time, UTC+6)

This technical data is collected automatically and is used primarily for security monitoring, fraud detection, and Platform performance optimisation. It is not linked to your identity for marketing purposes.

1.5 Communication Data

If you contact our support team via live chat or email, we retain records of those communications — including your messages, our responses, and any attachments you provide — for quality assurance, dispute resolution, and training purposes. Support communications are stored for a period of 24 months from the date of each interaction.

2. How We Use Your Data

tk999bat processes personal data only for lawful, specified, and legitimate purposes. The table below sets out the main categories of processing activity and the legal basis applied in each case.

2.1 Marketing Communications

tk999bat may send you promotional emails or SMS messages about bonuses, seasonal promotions (such as BPL cricket offers, Eid specials, and Pohela Boishakh campaigns), and new game releases — but only if you have opted in to receive marketing communications during registration or subsequently via your account preferences. You may withdraw marketing consent at any time by updating your notification settings within your account or by contacting support.

2.2 Automated Decision-Making

tk999bat uses automated systems to flag potentially fraudulent account activity, identify patterns consistent with problem gambling, and enforce bonus abuse policies. Where an automated system triggers a restriction on your account, you have the right to request a human review of that decision by contacting our support team. We will respond to such requests within five business days.

3. Data Sharing & Third Parties

3.1 Service Providers

To operate the Platform effectively, tk999bat shares limited personal data with trusted third-party service providers under contractual data processing agreements. These providers are permitted to use your data only for the purposes specified in their service contracts with us and are not permitted to use it for their own independent purposes. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, Visa, and Mastercard — for transaction processing. These providers receive only the data necessary to complete each transaction.
• Game studios and RNG providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — for delivering game content. Game providers receive a pseudonymous player identifier, not your full identity details.
• Identity verification partners: For KYC document review and biometric verification where applicable.
• Cloud infrastructure and hosting providers: For secure data storage and Platform hosting. All hosted data is encrypted at rest.
• Analytics platforms: For aggregated, anonymised usage analytics that help us improve Platform performance.

3.2 Legal Disclosure

tk999bat may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law or by a valid legal order. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement and will notify you of any disclosure to the extent permitted by law.

3.3 Business Transfers

In the event that tk999bat undergoes a business restructuring, merger, or acquisition, personal data held about players may form part of the transferred assets. In such circumstances, you will be notified in advance, and the acquiring entity will be bound by privacy commitments no less protective than those set out in this Policy.

3.4 No Sale of Personal Data

tk999bat does not sell, license, or otherwise commercially exploit your personal data to third-party advertisers, data brokers, or marketing companies. This commitment is absolute and not subject to any commercial arrangement.

4. Cookies & Tracking

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your session, preferences, and interactions over time. tk999bat uses cookies and similar tracking technologies (such as local storage and session tokens) to operate and improve the Platform.

4.2 Types of Cookies We Use

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Performance and analytics cookies: Used to collect anonymised data about how players navigate the Platform — which pages are visited most, where errors occur, and how long sessions last. This data is used solely to improve the player experience.
• Functional cookies: Used to remember your preferences such as language settings, preferred game category, and display options, so you do not need to reset them on each visit.

tk999bat does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking scripts. We do not share cookie-derived data with advertising networks.

4.3 Managing Cookie Preferences

You may configure your browser to block or delete cookies at any time. Most modern browsers (Chrome, Firefox, Safari, Edge) provide granular cookie management settings in their Privacy or Security sections. Please note that disabling strictly necessary cookies will prevent you from logging into your tk999bat account and using core Platform features.

5. Data Retention

tk999bat retains personal data for as long as your account is active and for a defined period thereafter, depending on the data category and applicable retention obligations. The table below summarises our standard retention periods.

Once a retention period expires, personal data is either securely deleted or irreversibly anonymised so that it can no longer be linked to any individual player. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

6. Security & Encryption

6.1 Technical Safeguards

tk999bat employs a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, or destruction. Key technical measures include:

• SSL/TLS encryption: All data in transit between your browser or app and our servers is encrypted using current-generation TLS protocols.
• Encryption at rest: Personal data stored in our databases is encrypted using AES-256 or equivalent standards. Encryption keys are managed separately from the data they protect.
• Password hashing: User passwords are never stored in plain text. We apply a strong one-way hashing algorithm with individual salt values for each account.
• Access controls: Internal access to personal data is restricted on a need-to-know basis. Staff access to sensitive data categories (KYC documents, financial records) is logged and audited.
• Intrusion detection: Our infrastructure is monitored 24/7 for anomalous access patterns, brute-force attempts, and other indicators of compromise.

6.2 Organisational Safeguards

In addition to technical measures, tk999bat maintains internal data protection policies, conducts regular staff training on handling personal data, and applies confidentiality obligations to all personnel and contractors who have access to player data.

6.3 Data Breach Response

In the event of a personal data breach that poses a risk to affected players, tk999bat will notify affected individuals without undue delay and will provide clear information about the nature of the breach, the data involved, and the steps taken to contain and remediate the incident. Notifications will be sent to the email address registered on your account.

7. Your Privacy Rights

As a player on tk999bat, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the details in Section 8 below.

• Right of access: You may request a copy of all personal data we hold about you. We will respond within 30 days of receiving a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to erasure ("right to be forgotten"): You may request that we delete your personal data. This right is subject to legal retention obligations — for example, we cannot delete KYC documents or financial records before their mandatory retention period has expired.
• Right to restrict processing: You may request that we temporarily stop processing your personal data in certain circumstances, for example while a dispute about data accuracy is resolved.
• Right to data portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to object to automated decisions: Where an automated system has taken a decision that materially affects your account, you have the right to request human review of that decision.

8. Contact & Data Inquiries

8.1 How to Reach Us

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or have concerns about how your personal data is being handled, please contact our support team using one of the methods below. Email addresses are displayed as plain text and are not clickable links.

• Email: support@tk999bat
• Live Chat: Available 24/7 via the chat icon on the Platform. Average response time: 2–5 minutes.

8.2 Policy Updates

tk999bat reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or Platform features. When we make material changes, we will notify registered players via the email address on their account and display a prominent notice on the Platform for a minimum of 30 days. The "Last Updated" date at the top of this page always reflects the date of the most recent revision. Continued use of the Platform after any revision constitutes your acceptance of the updated Policy.

8.3 Children's Privacy

tk999bat is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we discover that a minor has provided personal data to us in connection with an account, we will immediately close that account and delete all associated personal data. If you believe a minor has registered on the Platform, please contact us at support@tk999bat immediately.