tk191 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how tk191 ("tk191", "we", "us", "our") collects, uses, stores, and protects the personal information of users ("Player", "you", "your") who access or use the tk191 platform at tk191.io, including its website, mobile interface, and all associated services.

By registering an account, accessing the platform, or otherwise engaging with our services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should discontinue use of the platform immediately.

This Policy forms part of tk191's wider legal framework alongside the Terms & Conditions and the Responsible Gaming policy. We encourage you to read all three documents to fully understand how tk191 operates and what obligations and rights apply to you.

2. Who We Are

tk191 is an online sports betting and casino platform primarily serving players located in Bangladesh. The platform offers cricket betting, live casino games, online slots, crash games, and other wagering products accessible at tk191.io.

For the purposes of this Policy, tk191 acts as the data controller responsible for determining how and why personal data is processed in connection with the platform's services. All data-related enquiries should be directed to our support team at [email protected].

3. Information We Collect

3.1 Information You Provide Directly

When you register an account or interact with tk191's services, you may provide the following categories of personal information:

• Identity information: Full legal name, date of birth, and gender.
• Contact information: Email address, mobile phone number, and residential address (city, district).
• Identity verification documents: National Identity Card (NID), passport, or other government-issued photo identification submitted during KYC verification.
• Financial information: Mobile financial service account numbers (bKash, Nagad, Rocket, Upay) or bank account details used for deposit and withdrawal transactions.
• Account credentials: Username and encrypted password. We never store passwords in plain text.
• Communications: Messages sent to our support team, feedback submitted through the platform, and any correspondence initiated by you.

3.2 Information We Collect Automatically

When you use the tk191 platform, certain technical and behavioural data is collected automatically through our systems:

• Device and technical data: IP address, browser type and version, operating system, device type, and screen resolution.
• Usage data: Pages visited, features accessed, games played, bets placed, time spent on pages, click patterns, and session duration.
• Transaction data: Deposit history, withdrawal history, bet history, bonus activity, and account balance changes.
• Log data: Server access logs, error reports, and security event logs generated during your sessions on the platform.
• Cookie and tracking data: Information collected via cookies and similar tracking technologies as described in Section 7 of this Policy.

3.3 Information from Third Parties

In some circumstances, tk191 may receive personal data about you from third-party sources, including:

• Identity verification service providers used during KYC checks.
• Payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank) who confirm transaction status and account ownership.
• Fraud prevention and anti-money-laundering (AML) screening services.

4. How We Use Your Information

tk191 uses the personal data we collect for the following specific purposes:

Purpose	Data Categories Used
Account registration and management	Identity, contact, credentials
Identity and age verification (KYC)	Identity documents, date of birth
Processing deposits and withdrawals	Financial information, transaction data
Providing betting and gaming services	Usage data, transaction data
Fraud prevention and AML compliance	Identity, financial, device, log data
Customer support and query resolution	Identity, contact, communications
Platform security and abuse prevention	Device, log, usage data
Responsible gaming monitoring	Transaction data, usage data
Service improvement and analytics	Usage data, cookie data (aggregated)
Legal and regulatory compliance	Identity, financial, transaction data

tk191 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight. Responsible gaming monitoring may use automated pattern detection, but any resulting account restriction is reviewed by a staff member before implementation.

5. Legal Basis for Processing

tk191 processes personal data under the following legal bases:

• Contractual necessity: Processing required to create and manage your account, process transactions, and deliver the services you have requested.
• Legal obligation: Processing required to comply with applicable laws, including anti-money-laundering regulations, age verification requirements, and financial reporting obligations.
• Legitimate interests: Processing carried out to prevent fraud, maintain platform security, improve our services, and enforce our Terms & Conditions, provided such interests do not override your fundamental privacy rights.
• Consent: Where we rely on consent (for example, for certain marketing communications or optional cookies), you may withdraw that consent at any time by contacting [email protected] or adjusting your cookie preferences.

6. Data Sharing and Disclosure

6.1 Service Providers

tk191 shares personal data with carefully selected third-party service providers who assist us in operating the platform. These providers are contractually bound to process data only on our instructions and to maintain appropriate security standards. Categories of service providers include:

• Payment processors and mobile financial service operators (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank).
• Identity verification and KYC service providers.
• Fraud detection and anti-money-laundering screening platforms.
• Cloud hosting and data centre infrastructure providers.
• Customer support and live chat platform providers.
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — limited to game session data necessary to deliver gameplay.

6.2 Legal and Regulatory Disclosure

tk191 may disclose personal data to law enforcement authorities, regulatory bodies, or other competent public authorities when required to do so by applicable law, court order, or lawful regulatory demand. We will notify affected players of such disclosures where we are legally permitted to do so.

6.3 Business Transfers

In the event that tk191 undergoes a merger, acquisition, or sale of all or a substantial portion of its assets, player personal data may be transferred as part of that transaction. Players will be notified in advance of any such transfer and of any material changes to how their data will be processed.

6.4 What We Do Not Do

7. Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember your preferences, maintain your session, and collect information about how you interact with the platform over time.

7.2 How tk191 Uses Cookies

tk191 uses the following categories of cookies on its platform:

• Strictly necessary cookies: Essential for the platform to function. These enable login sessions, maintain your account state, and ensure secure transactions. These cannot be disabled without preventing the platform from working correctly.
• Functional cookies: Remember your preferences such as language settings, display options, and betting slip state to personalise your experience across sessions.
• Analytics cookies: Collect aggregated, anonymised data about how players use the platform to help us understand usage patterns and improve the service. No individual player is identified from this data.
• Security cookies: Help detect and prevent fraudulent activity, bot traffic, and other abusive behaviour on the platform.

7.3 Managing Cookies

You may control or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and personalisation features of the tk191 platform. For information on managing cookies in your specific browser, refer to your browser's help documentation.

8. Data Retention

tk191 retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. The following retention guidelines apply:

• Active account data: Retained for the duration of the account's existence plus a minimum of five years following account closure, in accordance with financial record-keeping and AML compliance obligations.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• KYC and identity documents: Retained for a minimum of five years from the date of submission or account closure, whichever is later.
• Support communications: Retained for two years from the date of last communication, unless a longer period is required in connection with an ongoing dispute or legal matter.
• Technical log data: Retained for up to twelve months unless required to be held longer in connection with a security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player.

9. Your Rights

As a player on the tk191 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request":

• Right of access: You may request a copy of the personal data tk191 holds about you, along with information about how it is processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances, such as while a correction request is being assessed.
• Right to data portability: Where technically feasible, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interests where your individual circumstances warrant such an objection.

We aim to respond to all data rights requests within 30 days of receipt. Where a request is complex or we receive a high volume of requests, we may extend this period by a further 30 days and will notify you accordingly.

10. Children and Minors

tk191 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. All players must confirm their age during registration, and tk191 reserves the right to request documentary proof of age at any time.

11. Security Measures

tk191 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure:

• 128-bit SSL/TLS encryption across all pages, login flows, and transaction endpoints.
• Password hashing using industry-standard one-way cryptographic algorithms. Plaintext passwords are never stored or transmitted.
• Access controls limiting personal data access to authorised personnel only, with role-based permissions and activity logging.
• Firewall and intrusion detection systems monitoring for suspicious network activity and blocking known threat vectors.
• Regular security reviews including periodic assessments of data processing practices and system vulnerabilities.
• Staff training on data protection, privacy obligations, and secure data handling practices.

While tk191 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your account and to enable any additional security features available within your account settings. In the event of a security incident affecting your personal data, tk191 will notify you as soon as reasonably practicable.

12. Third-Party Links

The tk191 platform may contain references to third-party content providers such as game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). While tk191 takes care to work only with reputable partners, we are not responsible for the privacy practices of third-party organisations. Players who interact directly with third-party services should review those parties' own privacy policies.

13. Changes to This Policy

tk191 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or the services we offer. The effective date at the top of this document will be updated accordingly whenever a revision is made.

Where changes are material — meaning they significantly affect how we handle your personal data or your rights — we will notify you through your registered email address or through an in-platform notification at least seven days before the updated Policy takes effect. Continued use of the platform after the effective date of any revision constitutes your acceptance of the updated Policy.

We encourage you to review this Policy periodically to stay informed about how tk191 protects and uses your information.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way tk191 handles your personal data, please reach out to our dedicated support team. We are committed to addressing all privacy-related enquiries promptly and transparently.

Support Email: [email protected]

Subject Line for Data Requests: "Data Rights Request" or "Privacy Enquiry"

Response Time: All privacy-related enquiries are acknowledged within 24 hours and substantively responded to within 30 days.

Availability: Our support team is available 24 hours a day, 7 days a week, including during Bangladesh public holidays, Eid, and all BPL match days.

For general platform support unrelated to privacy, you may also reach us using the same email address — our team will route your query to the appropriate department.