Privacy Policy — How tk877 Protects Your Data

01 Information We Collect

tk877 collects personal information from you in a number of ways depending on how you interact with our platform. We collect only what is necessary to provide, maintain, secure, and continuously improve the services we offer to players in Bangladesh. The categories of data we collect are set out below.

1.1 Information You Provide Directly

When you register an account, complete the KYC verification process, contact our support team, or interact with any form on the tk877 platform, you may provide us with:

• Identity data — your full legal name, date of birth, gender, and a copy of your National ID Card (NID) or other government-issued identification document
• Contact data — your mobile phone number, email address, and district or city of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar)
• Payment data — your registered bKash, Nagad, Rocket, or Upay mobile wallet number; bank account details where applicable; and records of deposits and withdrawals in BDT
• Account credentials — your chosen username and a hashed (never plain-text) version of your password
• Support communications — any messages, queries, or complaints you submit to the tk877 support team via live chat or email

1.2 Information Collected Automatically

When you visit the tk877 website or use our mobile-optimised platform, we automatically collect certain technical and behavioural data, including:

• Device and browser data — your IP address, device type (mobile, tablet, or desktop), operating system, browser type and version, and screen resolution
• Usage data — pages visited, games played, bet amounts and outcomes, session duration, navigation paths, and feature interactions
• Geolocation data — approximate location derived from your IP address (country and city level only — we do not access GPS-level location data)
• Cookie and tracking data — session cookies, authentication tokens, and analytics identifiers as described in Section 4 of this Policy

1.3 Information from Third Parties

In limited circumstances, tk877 may receive information about you from third-party sources, including:

• Payment processors such as bKash, Nagad, Rocket, or Upay — to confirm deposit and withdrawal transaction status
• Identity verification and fraud-screening service providers — to assist with KYC compliance and detection of fraudulent account activity
• Analytics platforms — aggregated, anonymised behavioural data used to improve platform performance and user experience

02 How We Use Your Information

tk877 uses the personal data we collect for the specific, legitimate purposes described in this section. We do not use your data in any manner that is incompatible with the purposes for which it was originally collected.

Purpose	Data Used	Legal Basis
Account registration and management	Identity data, contact data, account credentials	Contractual necessity
Identity verification (KYC)	Identity data, NID copy, payment account details	Legal obligation
Processing deposits and withdrawals	Payment data, identity data	Contractual necessity
Fraud prevention and security monitoring	IP address, device data, usage data, payment data	Legitimate interest
Responsible gaming compliance	Usage data, bet history, session data	Legal obligation / Legitimate interest
Customer support	Contact data, support communications, account data	Contractual necessity
Platform analytics and improvement	Usage data, device data (anonymised where possible)	Legitimate interest
Marketing communications (where opted in)	Contact data, preference data	Consent

2.1 Marketing Communications

tk877 will send you promotional emails or SMS notifications about bonuses, new games, or seasonal promotions (for example, during Eid, Pohela Boishakh, or BPL season) only if you have given your explicit consent to receive such communications at the time of registration or subsequently via your account settings. You may withdraw this consent at any time by updating your notification preferences or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

2.2 Automated Decision-Making

tk877 uses automated systems for certain fraud-detection and responsible gaming screening functions. Where an automated process results in a significant decision affecting your account — such as a temporary hold on a withdrawal — you have the right to request human review of that decision by contacting our support team.

03 Sharing and Disclosure of Data

tk877 treats your personal information with strict confidentiality. We do not sell your data to any third party. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

3.1 Service Providers and Data Processors

We work with a small number of carefully selected third-party service providers who process personal data on our behalf and under our instruction. These include:

• Payment processors — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard, solely for the purpose of executing your deposit and withdrawal transactions
• KYC and identity verification providers — to authenticate your identity documents and screen for fraudulent or duplicate accounts
• Cloud hosting and infrastructure providers — who store and process platform data in secure, access-controlled server environments
• Analytics providers — who receive anonymised, aggregated usage data to help us improve platform performance; these providers do not receive personally identifiable information

All third-party service providers are contractually required to process your data only as instructed by tk877, to maintain appropriate technical and organisational security measures, and to refrain from using your data for their own commercial purposes.

3.2 Legal and Regulatory Disclosure

tk877 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally required to do so — for example, in response to a valid court order, a lawful request from a law enforcement authority in Bangladesh, or to report suspected money laundering or financial crime. In such cases, we will disclose only the minimum information required to comply with the legal obligation.

3.3 Business Transfers

In the event that tk877 undergoes a merger, acquisition, or sale of all or part of its assets, personal data held on registered players may be transferred to the acquiring entity as part of that transaction. Where such a transfer occurs, we will notify affected players via their registered email address and ensure that the receiving entity is bound by privacy obligations no less protective than those set out in this Policy.

04 Cookies and Tracking Technologies

tk877 uses cookies and similar client-side technologies to ensure the platform functions correctly, to keep your session secure, and to understand how players interact with different features of the site. This section explains the types of cookies we use and how you can manage them.

4.1 What Are Cookies?

Cookies are small text files that a website places on your device when you visit it. They allow the site to remember information about your visit — such as your preferred language, login session, or items in a shopping cart — so that your next visit is smoother and more personalised. Cookies cannot execute programmes or deliver viruses to your device.

4.2 Types of Cookies We Use

• Strictly necessary cookies — These are essential for the platform to function. They manage your authenticated login session, maintain your BDT wallet balance display, and ensure secure page transitions. You cannot opt out of these cookies while using the platform, as they are required for basic operation.
• Performance and analytics cookies — These collect anonymised information about how players navigate the site — which game categories are most visited, which pages have the highest exit rate, and how long sessions typically last. This data is used solely to improve the tk877 platform experience and is never tied to your personal account without aggregation.
• Functional cookies — These remember your preferences, such as your chosen game filter settings or display options, so you do not need to reconfigure them on each visit.
• Security cookies — These help us detect and prevent fraudulent activity, including bot login attempts and unusual transaction patterns, by storing a fingerprint of your typical device and session behaviour.

4.3 What We Do Not Use

tk877 does not deploy third-party advertising cookies, retargeting pixels, social media tracking tags, or any cookie that tracks your behaviour across websites other than tk877.org. We do not use cookies to build advertising profiles or to share your browsing habits with any external marketing platform.

4.4 Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers (Chrome, Firefox, Edge, Safari) allow you to block or delete cookies via the privacy or security settings menu. Please note that disabling strictly necessary cookies will prevent you from logging in to your tk877 account and using core platform features. Disabling performance or functional cookies will not prevent you from using the platform but may affect your experience.

05 Data Retention and Storage

5.1 Retention Periods

tk877 retains personal data for different periods depending on the category of data and the purpose for which it was collected. Our standard retention schedules are as follows:

• Account and identity data — retained for the duration of your active account relationship with tk877, plus a minimum of five years following account closure to satisfy legal and anti-money-laundering record-keeping obligations
• Transaction records — all deposit, withdrawal, and bet records are retained for a minimum of five years from the date of the transaction in accordance with standard financial record-keeping requirements
• KYC documents — identity verification documents (NID copies, selfies) are retained for five years following account closure and then securely deleted
• Support communications — email and live chat transcripts are retained for three years from the date of the interaction
• Marketing consent records — records of when and how you gave or withdrew consent to marketing communications are retained for five years as evidence of compliance
• Analytics data — anonymised usage and behavioural analytics data is retained for up to two years and then aggregated or deleted

5.2 Storage Location

Personal data collected from tk877 players is stored on secure cloud infrastructure hosted in data centres that maintain internationally recognised security certifications. We implement access controls ensuring that only authorised tk877 personnel can access personal data, and only to the extent required for their specific role.

5.3 Secure Deletion

When personal data reaches the end of its applicable retention period, or when you submit a valid deletion request that we are legally able to honour, tk877 will securely delete or irreversibly anonymise your data. Secure deletion means that the data cannot be reconstructed or recovered from our systems following the deletion process.

06 Your Privacy Rights

As a player using the tk877 platform, you have a number of rights in relation to your personal data. tk877 is committed to honouring these rights promptly and without unnecessary obstruction. To exercise any of the rights described below, contact our team at [email protected] with the subject line "Data Rights Request" and your registered username or mobile number.

6.1 Right of Access

You have the right to request a copy of all personal data that tk877 holds about you. Upon a verified request, we will provide you with a structured summary of your data within 30 days. This includes your account details, transaction history, KYC status, and any support communications on record.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account details directly via your account settings page. For changes to identity data (name, date of birth) or payment account details, please contact [email protected], as these require verification before amendment.

6.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing based on legitimate interest and there is no compelling reason to continue. Please note that tk877 may be required by law to retain certain data (such as transaction records) regardless of a deletion request — in such cases, we will explain the legal basis for the retention clearly.

6.4 Right to Restrict Processing

You may request that tk877 restricts the processing of your personal data in certain circumstances — for example, while a dispute about its accuracy is being resolved, or while you await the outcome of an objection to processing. During a restriction, we will continue to store your data but will not actively process it beyond storage.

6.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider if you choose.

6.6 Right to Object

You have the right to object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on our legitimate interest, in which case tk877 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests. To withdraw marketing consent, update your notification settings in your account or contact [email protected].

07 Security Measures

tk877 takes the security of your personal data seriously. We implement a layered set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure.

7.1 Technical Safeguards

• TLS 1.3 encryption in transit — all data transmitted between your browser or device and our servers is encrypted using Transport Layer Security 1.3, the current industry standard for secure communication
• AES-256 encryption at rest — sensitive data fields including NID details, payment wallet numbers, and personal identifiers are encrypted at the database level using AES-256
• Hashed passwords — account passwords are stored as salted cryptographic hashes (bcrypt). tk877 staff cannot read your password, and it is never transmitted or logged in plain text
• Two-factor authentication (2FA) — tk877 supports and encourages the use of 2FA for account login to provide an additional layer of protection against unauthorised access
• Firewall and intrusion detection systems — our infrastructure is protected by enterprise-grade firewall rules and real-time intrusion detection and prevention systems (IDS/IPS)
• DDoS protection — the tk877 platform is protected against distributed denial-of-service attacks to ensure continuous availability and protect against data exfiltration attempts

7.2 Organisational Safeguards

• Access to personal data is restricted on a strictly need-to-know basis. Staff members can access only the data required to perform their specific job function
• All staff with access to personal data undergo data protection and security awareness training as part of their onboarding and on an ongoing annual basis
• Third-party service providers undergo a security assessment before being granted access to any tk877 systems that process personal data
• Regular internal security reviews and periodic penetration testing are carried out to identify and remediate vulnerabilities

7.3 Data Breach Response

Despite our best efforts, no system is completely immune to security incidents. In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, tk877 will notify affected users via their registered email address without undue delay and will take immediate remediation steps. We will document all breaches internally and take corrective action to prevent recurrence.

08 Changes to This Policy

8.1 Right to Update

tk877 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this Policy, we will update the "Last Updated" date displayed at the top of the document and, where the changes are significant, notify registered players via their registered email address or via an in-platform notification on their next login.

8.2 Continued Use Constitutes Acceptance

Your continued use of the tk877 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree with any change to this Policy, you should stop using the Services and may request account closure by contacting [email protected].

8.3 Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or about the way tk877 handles your personal data, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Support hours: 24/7 live chat available on-site; email responses within 2–4 hours
• Data rights requests: use subject line "Data Rights Request" and include your registered username

We are committed to resolving all privacy-related queries promptly and transparently. Where a complaint cannot be resolved directly, we will advise you on any further avenues available to you.