Privacy Policy — How tkaka Protects Your Data

tkaka collects personal data from you in three ways: information you provide directly when using the platform, information generated automatically through your use of the platform, and in limited circumstances, information received from third-party service providers who assist us in operating the platform.

Information You Provide Directly

When you register a tkaka account, complete identity verification (KYC), make a deposit or withdrawal, contact customer support, or participate in any promotion, you may provide us with the following categories of personal data:

• Identity data: your full legal name, date of birth, nationality, and government-issued ID number;
• Contact data: your email address and mobile phone number;
• Address data: your residential address (city, district, and postal code within Bangladesh);
• Financial data: your bKash, Nagad, or Rocket mobile number, bank account name and number (where used for withdrawals), and transaction reference numbers;
• Verification documents: scanned or photographed copies of your National ID card, passport, or driving licence submitted for KYC purposes;
• Communication data: records of your correspondence with tkaka support, including live chat transcripts and emails.

Information Collected Automatically

When you browse or use the tkaka platform, certain technical data is collected automatically by our systems:

Information From Third Parties

tkaka may receive limited personal data from third-party service providers including payment processors (to confirm transaction status), identity verification services (to cross-check KYC documents), and fraud prevention partners. In each case, the third party is contractually required to handle your data in accordance with applicable data protection standards and to share only the minimum data necessary for the stated purpose.

tkaka uses the personal data it holds to deliver a safe, fair, and personalised betting and gaming experience to players across Bangladesh. The specific purposes for which we process your data, along with the lawful basis for each, are set out below.

Account Management & Service Delivery

We use your identity, contact, and financial data to create and manage your tkaka account, verify your identity as required for KYC compliance, process deposits and withdrawals in Bangladeshi Taka via bKash, Nagad, Rocket, Upay, and bank transfer, settle bets and pay winnings, and provide customer support. This processing is necessary for the performance of our contract with you.

Security & Fraud Prevention

tkaka uses device data, IP address information, and behavioural analytics to detect and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and any other conduct prohibited under our Terms & Conditions. This processing is necessary for the protection of the platform's legitimate business interests and for compliance with applicable legal obligations.

Responsible Gaming Monitoring

We monitor account activity — including deposit frequency, session duration, and betting patterns — to identify indicators of potential problem gambling. Where such indicators are detected, tkaka may contact you with responsible gaming information, apply account-level spending limits, or initiate a review in accordance with our Responsible Gaming Policy. This processing serves both our legal obligations and the vital interests of our users.

Marketing Communications

Where you have provided your consent, tkaka may send you marketing communications about promotions, bonuses, new games, and platform features relevant to your interests. You may withdraw your consent to receive marketing communications at any time by contacting [email protected] or by following the unsubscribe link in any marketing email. Withdrawal of marketing consent does not affect your ability to use the tkaka platform.

Platform Improvement & Analytics

Aggregated and anonymised usage data is used to analyse platform performance, identify technical issues, improve the user interface, and develop new features. Where possible, this analysis is carried out on data that cannot be attributed to any individual user.

tkaka does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data with external parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

Service Providers

tkaka works with a small number of carefully selected third-party service providers who assist in operating the platform. These include payment processing partners (such as the operators of bKash, Nagad, and Rocket integrations), identity verification providers, cloud infrastructure providers, live casino game studios (including Evolution Gaming, Pragmatic Play Live, and Ezugi), and customer support tools. Each service provider is engaged under a data processing agreement that requires them to maintain appropriate security standards and to use your data only for the specific purpose for which it was shared.

Legal & Regulatory Disclosure

tkaka may be required by law, court order, or lawful regulatory request to disclose personal data to relevant authorities. In such circumstances, tkaka will disclose only the minimum data required to satisfy the legal obligation and will, where permitted by law, notify the affected account holder of the disclosure.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of tkaka's business assets, personal data held by tkaka may form part of the transferred assets. In such an event, tkaka will take reasonable steps to ensure that the acquiring party is bound by privacy obligations at least as protective as those set out in this Privacy Policy, and will notify affected users of any material change to how their data will be processed.

tkaka uses cookies and similar tracking technologies (including web beacons and local storage) to operate the platform, maintain session security, and improve your experience. This section explains what cookies we use and how you can manage them.

Types of Cookies Used

Managing Your Cookie Preferences

Most web browsers allow you to control cookies through their settings. You can configure your browser to refuse all cookies, to accept only essential cookies, or to notify you before a cookie is placed. Please note that disabling non-essential cookies may affect the functionality and user experience of the tkaka platform. Instructions for managing cookies vary by browser; refer to your browser's help documentation for guidance specific to your device and browser version.

tkaka retains personal data only for as long as it is necessary to fulfil the purposes set out in this Privacy Policy, to maintain accurate business records, and to comply with legal and regulatory retention obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes, as it can no longer be attributed to any individual.

Data Storage Location

tkaka's primary data infrastructure is hosted on secure cloud servers. All servers used to store personal data belonging to tkaka account holders are maintained with appropriate physical, technical, and organisational security controls. Where data is processed by a third-party service provider, tkaka requires the provider to maintain equivalent security standards.

tkaka respects your rights over your personal data. The following rights are available to all tkaka account holders and platform users. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request". tkaka will respond to all valid requests within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data tkaka holds about you, together with information about how it is being used. This is sometimes called a "Subject Access Request" (SAR).
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain account details directly within your tkaka account settings.
• Right to erasure: In certain circumstances, you have the right to request that tkaka delete your personal data. Please note that this right is subject to our legal retention obligations — we may be required to retain certain data (e.g., KYC documents and transaction records) for the periods set out in Section 5 regardless of an erasure request.
• Right to restrict processing: You may request that tkaka restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being investigated.
• Right to data portability: Where processing is carried out by automated means on the basis of your consent or contract performance, you have the right to receive a copy of your data in a structured, machine-readable format.
• Right to withdraw consent: Where tkaka processes your data on the basis of your consent (e.g., for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
• Right to object: You have the right to object to processing carried out on the basis of tkaka's legitimate interests, including profiling for responsible gaming purposes.

tkaka implements a layered approach to data security, combining technical controls, organisational policies, and ongoing monitoring to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure.

Technical Controls

The following technical measures are in place across the tkaka platform:

• All data in transit is protected by TLS 1.2 or higher encryption;
• Passwords are stored using one-way cryptographic hashing algorithms — tkaka staff cannot see your password in plain text;
• Access to production systems and personal data is restricted to authorised personnel only, on a need-to-know basis, with multi-factor authentication enforced for all internal system access;
• Regular automated vulnerability scanning and penetration testing is conducted on the tkaka platform infrastructure;
• Payment data is handled exclusively through PCI-DSS compliant payment gateway integrations — full card numbers and mobile banking credentials are never stored on tkaka servers.

Organisational Controls

Beyond technical controls, tkaka maintains internal data protection policies governing how staff handle personal data, mandatory data security awareness training for all personnel with access to personal data, a formal data breach response procedure, and contractual data protection obligations with all third-party service providers.

Reporting a Security Concern

If you believe your tkaka account has been compromised, or if you have identified a potential security vulnerability in the tkaka platform, please contact us immediately at [email protected]. tkaka investigates all reported security concerns promptly and will take appropriate action to protect affected accounts and platform integrity.

tkaka reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, changes in applicable law, and feedback from our users. The version number and effective date at the top of this page indicate the current revision. When we make material changes to this Privacy Policy — such as introducing a new category of data processing or a new data sharing arrangement — we will notify registered account holders via the email address on file.

Your continued use of the tkaka platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. We encourage you to review this page periodically to stay informed about how tkaka protects your personal data.

How to Contact Us About Privacy

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data tkaka holds about you, please contact our support team using the details below. All privacy-related correspondence is handled in English.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Privacy Requests: "Privacy Rights Request" or "Data Protection Query"
• Response Time: tkaka aims to respond to all privacy enquiries within 5 business days and to complete formal rights requests within 30 calendar days.
• Platform: tkaka.net — English-language service for the Bangladesh market