Privacy Policy — tk999aps

tk999aps ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of every user ("you", "Player") who accesses our online casino and sports betting services. This Privacy Policy applies to all data collected through the tk999aps website, mobile platform, customer support channels, and any associated promotional communications.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming policy. By registering an account or continuing to use tk999aps, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes. We collect only the data that is genuinely necessary to operate a safe, compliant, and high-quality gaming platform for players across Bangladesh — from Dhaka and Chittagong to Sylhet, Khulna, Rajshahi, and beyond.

tk999aps collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with our platform, and in limited cases from trusted third-party sources such as payment processors and identity verification partners. Below is a full breakdown of every category of data we may collect.

1.1 Identity & Registration Data

When you create an account on tk999aps, we collect the following registration data:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to verify that you meet the 18+ age requirement)
• Residential address, including city and postal code (Dhaka, Chittagong, Sylhet, etc.)
• Email address (used for account communications and security alerts)
• Mobile phone number (used for OTP authentication and support)
• Nationality and country of residence
• Username and encrypted password hash

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may request:

• Copies of your National Identity Card (NID), passport, or other government-issued photo ID
• Proof of address documents (utility bills, bank statements dated within the last three months)
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account details)
• Selfie photograph alongside your identity document, where required by our compliance team

1.3 Financial & Transaction Data

We record all deposit and withdrawal transactions made through your tk999aps account. This includes:

• Deposit amounts, timestamps, and payment method used (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard)
• Withdrawal requests, amounts, destination account details, and processing status
• Bonus credits, wagering activity, and cashback adjustments
• Account balance history and transaction reference numbers

We do not store full payment card numbers or mobile financial service PINs. These credentials are tokenised and processed exclusively by our PCI-DSS compliant payment partners.

1.4 Gaming & Betting Activity Data

To operate the platform and fulfil our responsible gaming obligations, we maintain records of:

• Games played, bets placed, stakes, outcomes, and session durations
• Sports betting selections, odds accepted, markets wagered on, and settlement results
• Game studio interactions (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, etc.)
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated, self-exclusion requests)

1.5 Technical & Device Data

When you access tk999aps, our servers and analytics systems automatically collect certain technical data:

Data Type	Description	Purpose
IP Address	Your internet protocol address at the time of access	Fraud detection, geographic restriction compliance
Device Identifier	Device type, operating system, browser version	Platform optimisation, multi-account detection
Session Data	Login time, session length, pages visited, clicks	Platform security, responsible gaming monitoring
Referral Source	URL or affiliate code that referred you to tk999aps	Marketing attribution, affiliate commission calculation
Geolocation (approximate)	Country and region derived from IP address	Geographic access restriction enforcement

1.6 Communications Data

When you contact our support team via live chat, email, or any other channel, we retain records of those communications including the content of messages, timestamps, and resolution outcomes. This data is used to improve service quality and to maintain an audit trail for dispute resolution purposes.

tk999aps uses your personal data only for the purposes for which it was collected or for compatible purposes that you would reasonably expect. We do not use your data for purposes unrelated to operating the platform without your explicit consent.

2.1 Core Platform Operations

• Creating, verifying, and maintaining your player account
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank channels
• Running and recording game rounds, bets, and sports betting market settlements
• Applying bonuses, calculating wagering progress, and managing VIP Club tier status
• Delivering platform notifications, account alerts, and OTP security codes to your registered mobile number

2.2 Legal & Compliance Obligations

• Performing age verification to enforce the 18+ minimum age requirement
• Conducting KYC identity checks in line with anti-money laundering best practice
• Monitoring transactions for suspicious activity and fulfilling AML reporting obligations
• Maintaining records required for audit, dispute resolution, and regulatory review
• Enforcing self-exclusion and responsible gaming restrictions applied to your account

2.3 Platform Security & Fraud Prevention

• Detecting and preventing fraudulent registrations, multi-accounting, and bonus abuse
• Identifying unusual betting patterns that may indicate match-fixing or collusion
• Verifying the authenticity of payment transactions and blocking chargebacks made in bad faith
• Maintaining audit logs for all account actions to support security investigations

2.4 Personalisation & Service Improvement

• Personalising your platform experience based on your game preferences and betting history
• Recommending relevant promotions, such as BPL and T20 World Cup betting offers, based on your activity
• Analysing aggregate platform usage patterns to improve game selection, UI performance, and payment flows
• Conducting internal research and analytics to enhance the overall player experience

2.5 Marketing Communications

With your consent, we may send you promotional communications about new games, seasonal offers (Eid, Pohela Boishakh, BPL Finals), and VIP Club rewards via email or SMS to your registered mobile number. You may opt out of marketing communications at any time by contacting us at support@tk999aps or by using the unsubscribe mechanism in any email we send you. Opting out of marketing will not affect your ability to use the platform or receive transactional account communications.

tk999aps processes your personal data on the following legal grounds, depending on the nature of the processing activity:

Processing Activity	Legal Basis
Account registration and management	Performance of a contract (our Terms & Conditions)
Payment processing and transaction records	Performance of a contract; legal obligation
KYC identity and age verification	Legal obligation; legitimate interests (platform integrity)
AML transaction monitoring	Legal obligation; legitimate interests
Fraud prevention and security monitoring	Legitimate interests (protecting players and the platform)
Responsible gaming monitoring and enforcement	Legal obligation; legitimate interests (player welfare)
Marketing communications	Consent (you may withdraw at any time)
Platform analytics and service improvement	Legitimate interests (improving user experience)

tk999aps does not sell or rent your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

4.1 Payment Processors

To facilitate deposits and withdrawals, we share necessary transaction data with our payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and international card processors (Visa, Mastercard). These partners receive only the data required to execute the specific transaction. They are contractually prohibited from using your data for any other purpose.

4.2 Game Studios & Software Providers

The games available on tk999aps are provided by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game provided by one of these studios, certain session and game-round data is transmitted to the studio's servers to render the game. Game studios are bound by strict data processing agreements and are not permitted to use player data for independent purposes.

4.3 Identity Verification Partners

To fulfil our KYC obligations, we may share identity document images and personal details with accredited identity verification service providers. These providers process your data solely to confirm your identity and age on our behalf and are prohibited from retaining or using your data for any unrelated purpose.

4.4 Legal & Regulatory Authorities

tk999aps may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where we are legally required to do so, where we receive a valid legal order or court directive, or where we have reasonable grounds to suspect fraudulent or criminal activity involving your account. Such disclosures will be made only to the extent required by law and will be documented in our internal compliance records.

4.5 Business Transfers

In the event that tk999aps undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide notice of any such transfer and ensure that the receiving party is bound by data protection obligations no less protective than those set out in this Privacy Policy.

tk999aps uses cookies and similar tracking technologies to operate the platform efficiently, enhance your browsing experience, and gather aggregate analytics data. A cookie is a small text file placed on your device by a website. Cookies allow the platform to remember your preferences, maintain your authenticated session, and measure how the site is used.

5.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Strictly Necessary	Enable core platform functions: session authentication, account security, payment processing flow	Session / up to 24 hours
Functional	Remember your preferences such as language, game lobby layout, and betting stake defaults	Up to 12 months
Analytics	Aggregate, anonymised data on pages visited, session duration, and feature usage — used to improve the platform	Up to 24 months
Marketing / Attribution	Track which affiliate or campaign referred you to tk999aps, for commission calculation and campaign performance measurement	Up to 30 days

5.2 Managing Cookies

You may control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored on your device. Please note that disabling strictly necessary cookies will prevent you from logging into your tk999aps account and using core platform features. Disabling functional or analytics cookies will not affect your ability to access the platform but may reduce the quality of your personalised experience.

For detailed guidance on managing cookies in your specific browser, refer to the help documentation of your browser provider. tk999aps does not respond to browser "Do Not Track" signals at this time.

tk999aps retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal, regulatory, or audit obligations. The following general retention periods apply:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years post-closure	Legal obligation; dispute resolution
KYC identity documents	Duration of account + 5 years post-closure	AML compliance; regulatory audit
Transaction records	7 years from transaction date	Financial record-keeping obligation
Gaming & betting activity logs	5 years from date of activity	Responsible gaming monitoring; audit
Support communications	3 years from last interaction	Dispute resolution; quality assurance
Marketing consent records	Until consent withdrawn + 3 years	Proof of consent; regulatory compliance
Self-exclusion records	Permanent (for lifetime exclusions)	Player welfare; re-registration prevention

6.1 Data Storage Location

Your personal data is stored on secure servers. We apply appropriate technical and organisational security measures to protect your data regardless of where it is stored. All data transfers between your device and our servers are protected by 256-bit SSL/TLS encryption.

6.2 Data Deletion

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with industry-standard data destruction procedures. Anonymised or aggregated data (from which you cannot be individually identified) may be retained indefinitely for statistical and research purposes.

tk999aps respects your rights over your personal data. Subject to applicable law and any overriding legal obligations we are bound by (such as AML record-keeping requirements), you have the following rights with respect to your personal data held by tk999aps:

7.1 Right of Access

You have the right to request a copy of all personal data we hold about you. We will provide this information in a clear, readable format within 30 days of receiving a valid request. To submit an access request, contact us at support@tk999aps with the subject line "Data Access Request" and include your registered account email address and a copy of your identity document for verification.

7.2 Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may update basic account details (email address, phone number, mailing address) directly through your account settings page. For corrections to KYC documents or legal name records, please contact support.

7.3 Right to Erasure

You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing. Please note that we cannot delete data we are legally required to retain (such as transaction records and KYC documents), and erasure of account data will require the permanent closure of your tk999aps account.

7.4 Right to Restrict Processing

You may request that we restrict the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested or while an objection to processing is being assessed. During a restriction period, we will store your data but not actively process it beyond what is strictly necessary.

7.5 Right to Data Portability

Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to request that we transmit that data directly to another controller where technically feasible.

7.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. Upon receiving a valid objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims. You may object to direct marketing processing at any time, and we will cease immediately upon receipt of your objection.

tk999aps implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. While no online platform can guarantee absolute security, we maintain industry-leading standards appropriate to the nature and volume of data we process.

8.1 Technical Safeguards

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using the same standard employed by international banking institutions.
• Password Hashing: Account passwords are never stored in plain text. They are processed using a strong cryptographic hashing algorithm with per-user salts.
• Two-Factor Authentication (2FA): SMS-based OTP authentication is available (and strongly recommended) for all accounts.
• Firewalls & Intrusion Detection: Our infrastructure is protected by enterprise-grade firewall rules and continuous intrusion detection and prevention systems.
• Data Access Controls: Access to personal data within our organisation is restricted on a strict need-to-know basis. Staff are granted the minimum level of data access required to perform their role.
• Regular Security Audits: Our platform undergoes periodic third-party security assessments and penetration testing to identify and remediate vulnerabilities proactively.

8.2 Organisational Safeguards

• All staff who handle personal data receive regular data protection and security training
• Data processing agreements are in place with all third-party service providers who handle personal data on our behalf
• A documented incident response procedure is in place for detecting, containing, and notifying affected parties in the event of a data breach
• Internal data protection policies govern how personal data is handled, stored, transferred, and destroyed throughout its lifecycle

8.3 What You Can Do

You play an important role in keeping your account data secure. We strongly recommend that you use a unique, strong password for your tk999aps account that you do not reuse on any other platform, enable 2FA on your account, never share your login credentials or OTP codes with anyone (including individuals claiming to be tk999aps staff), and contact our support team immediately at support@tk999aps if you suspect unauthorised access to your account.

9.1 Updates to This Policy

tk999aps reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. Material changes will be communicated to registered players via email notification to your registered address and/or by a prominent notice on the tk999aps website. The "Effective Date" at the top of this document will always reflect the date of the most recent revision.

Your continued use of the platform following the effective date of any revision constitutes your acknowledgement and acceptance of the updated Privacy Policy. We encourage you to review this page periodically. If any revision materially reduces your privacy rights, we will provide at least 14 days' advance notice before the changes take effect.

9.2 Third-Party Links & Services

The tk999aps platform integrates third-party game content from studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. While we have data processing agreements in place with all providers, each studio operates its own privacy practices for data processed directly on its infrastructure. tk999aps is not responsible for the privacy practices of third-party game providers beyond the scope of our contractual data protection obligations.

9.3 Children & Minors

tk999aps is strictly an adult platform for players aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. If we discover or are notified that personal data belonging to a minor has been collected, we will immediately delete that data and close any associated account. If you believe a minor has registered on our platform, please notify us at support@tk999aps without delay.

9.4 Contact Us

For all privacy-related queries, data subject rights requests, or concerns about how tk999aps handles your personal data, please contact our team. All privacy-related communications must be submitted in English.

Email: support@tk999aps
Response time: Within 3 business days for privacy-related requests; within 30 days for formal data subject rights requests.
Support hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6).