Privacy Policy

Effective Date: 01 January 2026 | This policy applies to all users of tkok (https://tkok.bar).

1. Introduction

tkok ("we", "our", or "us") operates the online gaming and sports betting platform accessible at https://tkok.bar. We are committed to maintaining the privacy and security of all users who access or register on our platform, including players based in Dhaka, Chittagong, Sylhet, and across Bangladesh. This Privacy Policy describes the types of personal data we collect, the purposes for which we process it, the legal bases on which we rely, how we share it, and the rights available to you as a user.

By accessing or using the tkok platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our services immediately. We encourage you to review this policy periodically, as it may be updated from time to time to reflect changes in our practices or applicable law.

2. Information We Collect

When you register for an account, make deposits or withdrawals, contact our support team, or simply browse tkok, we may collect the following categories of personal information:

• Identity data: full name, date of birth, username, and a copy of government-issued identification document for KYC verification purposes.
• Contact data: email address, mobile phone number, and residential address (city and country, at minimum Dhaka or other Bangladeshi city of residence).
• Financial data: payment method details (such as your bKash, Nagad, or Rocket account references), transaction history, deposit amounts, and withdrawal records.
• Technical data: IP address, browser type and version, device type and operating system, session timestamps, referral URL, and cookie identifiers.
• Gameplay and behavioural data: betting history, game sessions, wagering amounts, responsible gaming preferences, and any self-exclusion or deposit-limit elections you have made.

We collect this information directly from you at registration and during platform use, automatically through cookies and similar tracking technologies, and in limited cases from third-party identity verification partners required for KYC compliance.

3. How We Use Your Information

tkok processes your personal data for the following specific purposes. We rely on the applicable legal basis described in Section 4 for each use:

• Account creation and management: to register your account, verify your identity (KYC), maintain your profile, and enable you to log in securely.
• Transaction processing: to handle deposits via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, process withdrawals, and maintain accurate financial records.
• Platform security and fraud prevention: to detect suspicious activity, prevent unauthorised access, and protect both users and the platform from abuse and fraudulent transactions.
• Responsible gaming compliance: to enforce age verification (21+ only), apply deposit limits, process self-exclusion requests, and monitor for signs of problem gambling.
• Customer support: to respond to your queries, complaints, and technical issues through our support channels, and to keep a record of communications for quality and dispute-resolution purposes.
• Product improvement and analytics: to analyse aggregated, anonymised usage patterns to improve our game offerings, payment flows, and overall user experience for our Bangladesh audience.

4. Legal Basis for Processing

We process your personal data on one or more of the following legal bases, depending on the specific purpose:

• Contractual necessity: processing your data is required to perform the contract you have entered into with tkok by creating an account and using our services.
• Legal obligation: we are required to collect and retain certain data to comply with applicable anti-money laundering (AML) requirements, KYC regulations, and financial record-keeping obligations.
• Legitimate interests: we process technical and behavioural data to detect fraud, improve platform security, and enhance the user experience, provided this does not override your fundamental rights.
• Consent: where we send you promotional communications or use non-essential cookies, we do so on the basis of your explicit consent, which you may withdraw at any time.

5. Sharing Your Data

tkok does not sell your personal data to third parties. We may share your data only in the following limited circumstances:

• Payment processors: we share the minimum necessary financial data with licensed payment partners (including bKash, Nagad, and Rocket integrations) solely to process your deposits and withdrawals.
• Identity verification providers: we may share identity documents with our KYC partner for the purpose of verifying your age and identity in compliance with our responsible gaming obligations.
• Legal and regulatory authorities: we may disclose personal data to law enforcement, regulatory bodies, or government authorities if required by applicable law or a valid legal process, or to protect the rights and safety of tkok and its users.
• Technical service providers: third-party vendors that provide hosting, analytics, or fraud-detection infrastructure may process data on our behalf under strict data processing agreements that prohibit them from using your data for their own purposes.

We require all third parties who process data on our behalf to maintain appropriate technical and organisational security measures and to handle your data strictly in accordance with our instructions and this Privacy Policy.

6. Payment Data & Financial Security

tkok supports multiple payment methods tailored for Bangladesh users, including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. When you initiate a deposit or withdrawal, your payment credentials are transmitted directly to the relevant payment processor over an encrypted SSL connection. tkok does not store full card numbers or mobile banking PINs on its own servers at any time.

All financial transactions are logged with a unique reference ID for audit and dispute-resolution purposes. If you believe an unauthorised transaction has occurred on your tkok account, contact our support team immediately at the email address listed in Section 13 of this policy.

7. Cookies & Tracking Technologies

tkok uses cookies and similar technologies to operate the platform, remember your preferences, and gather analytics. We use three categories of cookies:

• Essential cookies: strictly necessary for the platform to function, including session authentication, CSRF protection, and load-balancing tokens. These cannot be disabled without breaking core functionality.
• Performance and analytics cookies: used to measure how users navigate the site, which game pages receive the most visits, and where technical errors occur, allowing us to improve our service for Bangladesh users.
• Marketing and preference cookies: placed with your consent to personalise the content you see and to deliver relevant promotional communications based on your stated preferences and activity on tkok.

You may manage or withdraw your consent for non-essential cookies at any time by adjusting your browser settings. Disabling performance or marketing cookies will not prevent you from using the platform, but may limit the personalisation of your experience.

8. Data Retention

We retain personal data only for as long as is necessary for the purposes described in this Privacy Policy, or as required by applicable law. Specifically: account data is retained for the duration of your active account and for a period of five (5) years after account closure; financial transaction records are retained for a minimum of seven (7) years to comply with financial record-keeping obligations; technical and analytical logs are typically retained for no longer than 12 months; and marketing consent records are retained until you withdraw your consent.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with any individual. Where deletion is not immediately practicable, we will restrict processing of the data until deletion is possible.

9. Your Rights as a User

tkok respects and upholds your privacy rights. Subject to applicable law and identity verification, you have the following rights regarding your personal data held by tkok:

• Right of access: you may request a copy of the personal data we hold about you, including what categories of data we process and the purposes for which it is used.
• Right to rectification: if any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to erasure: in certain circumstances you may request that we delete your personal data. This right is subject to overriding legal obligations — for example, we cannot erase financial records we are required to retain under applicable law.
• Right to restriction of processing: you may ask us to restrict the processing of your personal data in specific situations, such as where you contest the accuracy of the data or object to our processing.
• Right to data portability: where we process your data by automated means on the basis of your consent or a contract, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to object: you have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling and direct marketing communications.

To exercise any of these rights, please contact us using the details provided in Section 13. We will respond to verified requests within a reasonable timeframe. We may need to verify your identity before processing your request.

10. Security Measures

tkok implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and our servers, bcrypt hashing for stored passwords, role-based access controls that limit staff access to personal data on a strict need-to-know basis, regular security audits, and intrusion-detection monitoring.

While we take every reasonable precaution to protect your data, no method of transmission over the internet or electronic storage is completely secure. If you become aware of any security vulnerability or suspect that your account has been compromised, please contact our support team immediately.

11. Minors and Age Restriction

tkok is strictly for adults aged 21 and above. We do not knowingly collect personal data from any individual under the age of 21. If you are under 21, you must not register an account, make a deposit, or place any wager on the tkok platform. If we become aware that we have inadvertently collected personal data from a person under 21, we will delete that data immediately and close the associated account. Parents and guardians are encouraged to use parental control tools to prevent minors from accessing online gaming platforms. If you believe a minor has registered on tkok, please contact us immediately at the address in Section 13.

12. Changes to This Privacy Policy

tkok reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will update the effective date displayed at the top of this page and, where appropriate, notify registered users via the email address associated with their account. Your continued use of the tkok platform after any such change constitutes your acceptance of the updated Privacy Policy. If you do not agree to the revised policy, please cease using our services and contact us to request account closure.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way tkok processes your personal data, please contact our Data Privacy team. We are committed to addressing your enquiry promptly and transparently.

You can reach us by email at: [email protected] — please use the subject line "Privacy Request" so our team can route your message to the correct department. We aim to acknowledge all privacy-related enquiries within 2 business days and to resolve them fully within 30 calendar days.