tkfb Privacy Policy

This Privacy Policy applies to all individuals who interact with tkfb, including registered account holders, visitors to the tkfb.io website who have not yet registered, and any person who contacts tkfb through our support channels. It covers all personal data processed by tkfb in connection with the operation of the platform, regardless of the device or method used to access it.

tkfb operates as the data controller for all personal data collected through the tkfb.io platform. This means that tkfb determines the purposes and means by which your personal data is processed. If you have questions about how your data is being handled, or wish to exercise any of your data rights, you may contact our Data Protection Officer (DPO) at support at tkfb.io.

The tkfb platform is targeted primarily at players based in Bangladesh. This Privacy Policy is drafted with Bangladesh-based players in mind. Players accessing the platform from other jurisdictions should be aware that data protection standards may differ from those in their home country. By using the platform from any jurisdiction, you consent to the data practices described in this policy.

When you create a tkfb account, we collect the following information:

• Full legal name as it appears on your government-issued ID
• Date of birth (to verify that you meet the 21+ age requirement)
• Mobile phone number (used for account verification and 2FA)
• Email address (used for account communications and password recovery)
• Chosen username and encrypted password
• Residential address in Bangladesh (required for KYC compliance)
• National ID number or passport number (submitted during KYC verification)

To process deposits and withdrawals, tkfb collects the following financial information:

• Mobile banking account identifiers (bKash, Nagad, Rocket, Upay account numbers — partial, not full credentials)
• Bank account details where bank transfer is used (Dutch-Bangla Bank, City Bank, BRAC Bank, etc.)
• Debit or credit card details where Visa or Mastercard is used (stored in tokenised form only — we never store full card numbers)
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method used
• Account balance history for audit and dispute resolution purposes

Full card numbers and mobile banking PINs are never stored on tkfb servers. Payment credentials are handled exclusively by our certified payment processing partners.

As part of our Know Your Customer (KYC) process, we may collect and process copies of the following documents:

• Government-issued photo identification (National ID Card, Passport, or Driving Licence)
• Proof of address documents (utility bills, bank statements, or official government correspondence)
• Selfie photographs taken during liveness verification
• Proof of payment method ownership

These documents are processed by our KYC verification partner under strict data processing agreements and are retained only for the period required by applicable anti-money laundering regulations.

When you visit or use the tkfb platform, our servers and analytics systems automatically collect the following technical data:

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Pages visited, features used, and time spent on each section
• Betting and gaming activity logs (markets bet on, game sessions, wager amounts)
• Login timestamps and session duration data
• Referral source (how you arrived at tkfb.io)

This data is used for platform security monitoring, fraud prevention, product improvement, and responsible gaming monitoring. It is not used to identify you personally beyond what is necessary for these purposes.

The primary purpose for which tkfb processes your personal data is to deliver and maintain the betting and gaming services you have signed up for. This includes creating and managing your account, processing deposits and withdrawals, settling bets, awarding bonuses, and providing customer support. Without processing your personal data for this purpose, we could not operate the platform.

We use your identity and financial data to verify that you are who you say you are, to confirm that you meet the minimum age requirement of 21 years, and to detect and prevent fraudulent activity including account takeover, payment fraud, money laundering, and multi-accounting. Fraud prevention is both a legal obligation and a fundamental part of maintaining a fair and safe platform for all players.

tkfb is required to retain certain categories of personal and financial data to comply with applicable anti-money laundering (AML) regulations, financial record-keeping obligations, and any lawful requests from competent authorities. Data processed under this legal basis is retained only for the period mandated by the applicable regulation and is not used for any other purpose.

We analyse your gameplay behaviour, session frequency, deposit patterns, and loss history as part of our responsible gaming programme. This analysis helps us identify players who may be showing signs of problem gambling so that we can reach out proactively, apply agreed-upon deposit limits or self-exclusion measures, and refer players to appropriate support services. This data processing is carried out in your vital interest and in the public interest of harm prevention.

Aggregated and anonymised usage data is used to understand how players interact with the tkfb platform, which features are most popular, where technical issues occur, and how the overall player experience can be improved. Individual players are not identifiable in these analytical reports. We use this information purely to make tkfb a better product for all Bangladesh players.

With your consent, we may use your email address and phone number to send you promotional communications about new games, bonuses, special events, and seasonal offers relevant to the Bangladesh market (such as Eid promotions, Pohela Boishakh offers, and BPL cricket season bonuses). You may withdraw your consent to marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal.

To process deposits and withdrawals, we share relevant financial data with our authorised payment partners including bKash, Nagad, Rocket, Upay, and card-processing networks (Visa, Mastercard). The data shared is limited to the transaction details necessary to complete the payment. These partners operate under their own privacy policies and are independently responsible for data they process through their own systems.

Your identity documents and selfie photographs are shared with our certified KYC verification partner solely for the purpose of verifying your identity and age. This partner processes data under a formal data processing agreement and is prohibited from using your data for any other purpose. Verified identity data is not retained by the KYC provider beyond the verification process.

Third-party game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive a pseudonymous player identifier and session data necessary to operate their games within the tkfb platform. These providers do not receive your full name, contact details, or financial information. Game session data is used by providers for game integrity monitoring and technical support only.

tkfb may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other competent authorities where we are legally required to do so by applicable law, court order, or regulatory directive. We will notify you of any such disclosure where we are legally permitted to do so. In cases involving suspected criminal activity (such as fraud or money laundering), we may be legally prohibited from notifying you of the disclosure.

tkfb retains different categories of personal data for different periods, depending on the purpose for which the data was collected and the legal obligations that apply:

When personal data reaches the end of its applicable retention period, tkfb securely deletes or anonymises it using industry-standard data destruction methods. Anonymised data — from which no individual can be identified — may be retained indefinitely for statistical and analytical purposes. Where deletion is not immediately technically feasible (for example, data held in encrypted backup archives), the data is isolated from active systems and scheduled for deletion at the next available backup rotation cycle.

Cookies are small text files placed on your device by the tkfb website when you visit. They allow the platform to recognise your device on subsequent visits, remember your preferences, maintain your login session, and collect analytical data about how the site is used. tkfb uses both first-party cookies (set directly by tkfb.io) and third-party cookies (set by our analytics and game provider partners).

The following categories of cookies are used on the tkfb platform:

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and display options. These improve your experience but are not essential to platform operation.
• Analytics Cookies: Collect anonymised data about how players use the platform — pages visited, features used, and time spent. This data is used to improve the platform. We use privacy-respecting analytics tools that do not share data with advertising networks.
• Game Provider Cookies: Set by third-party game providers (Pragmatic Play, Evolution Gaming, etc.) to maintain game session integrity. These are limited to the duration of your game session.

You can control and delete cookies through your browser settings at any time. Most modern browsers allow you to block all cookies, accept only first-party cookies, or receive a notification before a cookie is stored. Please note that disabling strictly necessary cookies will prevent you from logging in and using core platform features. Instructions for managing cookies in popular browsers are available through your browser's help documentation.

The following technical measures are in place to protect your personal data on the tkfb platform:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and tkfb servers is encrypted using TLS 1.2 or higher, preventing interception by third parties.
• AES-256 Data Encryption at Rest: Sensitive personal data stored in our databases is encrypted at the storage level, ensuring that even in the event of a physical breach, data cannot be read without the encryption keys.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts, adding an additional verification step beyond the password.
• Firewalls and Intrusion Detection: Our servers are protected by enterprise-grade firewalls and real-time intrusion detection systems that flag and block suspicious access attempts.
• Penetration Testing: tkfb commissions independent security assessments and penetration tests on a regular basis to identify and remediate vulnerabilities before they can be exploited.

Beyond technical controls, tkfb maintains strict organisational policies to limit access to personal data. Access to player data is restricted on a need-to-know basis — only staff members whose role requires access to specific data categories are granted that access. All staff with access to personal data are required to undergo data protection training and are bound by confidentiality obligations. Access rights are reviewed regularly and revoked when no longer required.

In the unlikely event of a personal data breach that poses a risk to the rights and freedoms of affected players, tkfb will notify affected individuals as quickly as practicable and will take immediate steps to contain the breach, assess its scope, and prevent recurrence. We maintain a documented incident response plan specifically for data breach scenarios. Players who suspect unauthorised access to their account should immediately contact our 24/7 support team via live chat.

tkfb collects date of birth at registration and verifies age through our KYC process using government-issued identification. Players who cannot demonstrate that they are aged 21 or above will not be permitted to access the platform's real-money features. If you are a parent or guardian and believe your child has registered on the tkfb platform, please contact us immediately at support at tkfb.io so that we can take prompt action.

The tkfb platform integrates third-party game content from providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game supplied by one of these providers, a limited set of pseudonymous session data is processed by that provider's systems to operate the game. These providers maintain their own privacy policies and security standards. tkfb selects game providers that meet recognised industry security and fairness certifications.

When you initiate a deposit or withdrawal, you may be redirected to or interact with the interface of a payment provider such as bKash, Nagad, or Rocket. These payment providers operate their own platforms, collect their own data directly from you, and are governed by their own privacy policies. tkfb is not responsible for the data practices of payment providers on their own platforms. We encourage you to review the privacy policies of any payment provider you use.

tkfb reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, updates to applicable law, new platform features, or feedback from our player community. The most current version of this Privacy Policy will always be available at tkfb.io/privacy-policy. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

Where a change to this Privacy Policy is material — meaning it significantly affects how we collect, use, or share your personal data — we will notify registered players by email and/or via an in-platform notification at least 14 days before the change takes effect. Continued use of the tkfb platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, you should discontinue use of the platform and request account closure.

You may reach our Data Protection Officer through the following channels:

• Email: support at tkfb.io — please include "Privacy Request" in the subject line to ensure your message reaches the DPO team promptly.
• Live Chat: Available 24/7 on the tkfb platform. Identify yourself and state that your query relates to data privacy.
• WhatsApp: +880 1XXX-XXXXXX — available during Bangladesh Standard Time (BST, UTC+6) business hours.

When submitting a data rights request, please provide your registered username and the email address associated with your account so that we can verify your identity before processing the request. We will never ask for your password.