tk70 Privacy Policy

1.1 About tk70. tk70 is an international offshore online betting and gaming platform serving English-speaking players in Bangladesh and other eligible markets. We offer sports betting, live casino, slots, crash games, and related entertainment products. Our registered support contact is [email protected].

1.2 Scope. This Policy applies to all personal data collected through: (a) the tk70 website at https://tk70.io and any subdomains; (b) the account registration, verification, and management process; (c) deposits, withdrawals, and transaction activity; (d) customer support interactions via email or live chat; (e) any promotional or loyalty programme in which you participate; and (f) technical data automatically collected when you access the platform.

1.3 Age Requirement. The tk70 platform is strictly intended for adults aged 21 years or older. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a user under 21 has provided us with personal data, we will take immediate steps to delete that data and close the associated account. See Section 10 for full details.

1.4 Policy Language. This Policy is published in English. In the event of any inconsistency between this English version and any translated summary, the English version shall govern in all respects.

2.1 Information You Provide Directly. When you register an account, complete identity verification, make a deposit or withdrawal, contact support, or participate in a promotion, you may provide us with the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, gender.
• Contact Data: Email address, mobile phone number, residential address (including city, district, and postal code).
• Identity Verification Documents: Government-issued photo ID (National Identity Card, passport, driving licence), proof of address documents (utility bill, bank statement), and proof of payment method ownership.
• Financial Data: Mobile financial service account numbers (bKash, Nagad, Rocket, Upay), bank account details, transaction history, deposit and withdrawal records.
• Account Credentials: Username and hashed password. We never store passwords in plaintext.
• Support Communications: The content of emails, chat transcripts, and any other correspondence you send to our support team.
• Responsible Gaming Preferences: Self-exclusion requests, deposit limits, loss limits, session time limits, and cooling-off period configurations.

2.2 Information Collected Automatically. When you access the tk70 platform, our systems automatically record certain technical data. This may include:

• Device Data: Device type, operating system, browser type and version, screen resolution, device language settings.
• Network Data: IP address, approximate geographic location derived from IP address, internet service provider (ISP).
• Usage Data: Pages visited, games played, bets placed, session start and end times, click patterns, search queries within the platform, and feature interactions.
• Cookie and Tracking Data: As described in Section 6 of this Policy.

2.3 Information from Third Parties. We may receive personal data about you from third-party sources in the following circumstances: (a) identity and age verification service providers who validate the documents you submit; (b) payment processing partners who confirm transaction status and flag potentially fraudulent activity; (c) fraud detection and anti-money laundering (AML) screening services; (d) publicly available sources such as sanctions lists, politically exposed persons (PEP) databases, and adverse media screening tools.

2.4 Sensitive Data. tk70 does not intentionally collect special categories of sensitive personal data (such as health information, religious beliefs, or political opinions) unless you voluntarily disclose such information in the context of a responsible gaming request — for example, if you advise our support team of a mental health condition in connection with a self-exclusion request. Any sensitive data disclosed in such a context will be used only for the specific purpose for which it was provided and will be handled with the highest level of care and confidentiality.

3.1 Account Management. We use your identity and contact data to create and maintain your tk70 account, authenticate your identity when you log in, communicate important account notices, and process your account closure request if submitted.

3.2 Transaction Processing. Your financial data and identity data are used to process deposit and withdrawal requests, verify ownership of the payment method used, prevent duplicate or fraudulent transactions, and maintain accurate financial records.

3.3 Identity Verification and KYC. We process identity documents and verification data to confirm that you meet our minimum age requirement of 21 years, verify that you are not on any self-exclusion register, screen for sanctions and PEP status as required by applicable AML obligations, and detect and prevent identity fraud.

3.4 Platform Delivery and Improvement. Usage and technical data collected automatically is used to deliver the platform to your device, diagnose and resolve technical faults, improve platform performance and game loading times, develop new features and products, and conduct internal analytics to understand how players interact with the platform.

3.5 Security and Fraud Prevention. We process IP addresses, device data, and behavioural patterns to detect and prevent unauthorised account access, identify and investigate suspected fraud or collusion, enforce our prohibited activities policy, and protect the integrity of our betting markets.

3.6 Responsible Gaming. Data relating to your gaming behaviour, deposit patterns, session durations, and responsible gaming preferences is processed to: monitor for indicators of problem gambling; deliver responsible gaming interventions where appropriate; enforce deposit limits, cooling-off periods, and self-exclusion arrangements you have requested; and comply with responsible gaming obligations.

3.7 Marketing Communications. With your prior consent, we may use your contact data to send promotional emails, SMS notifications, or in-platform messages about bonuses, new game releases, seasonal promotions (such as Eid or Pohela Boishakh specials), and platform updates. You may withdraw consent at any time as described in Section 9.

3.8 Legal and Regulatory Compliance. We process personal data as necessary to comply with our legal obligations, including responding to lawful requests from law enforcement authorities, maintaining financial records for audit purposes, and reporting suspicious transactions under applicable AML frameworks.

The table below summarises the primary legal basis on which tk70 relies for each major category of data processing activity.

4.1 Legitimate Interests. Where we rely on legitimate interests as our legal basis, we have assessed that our interests in processing your data are not overridden by your fundamental rights and freedoms, taking into account the limited nature of the data processed, the safeguards we apply, and the reasonable expectations of players using an online betting platform.

4.2 Withdrawal of Consent. Where processing is based on your consent (most notably, marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent does not affect processing carried out under other legal bases such as contractual necessity or legal obligation.

5.1 Service Providers. We share personal data with carefully selected third-party service providers who process data on our behalf strictly for the purposes described in this Policy. These providers include:

• Payment Processors: bKash, Nagad, Rocket, Upay, DBBL, BRAC Bank, City Bank, Islami Bank, and other financial institutions required to execute your transactions.
• Identity Verification Providers: Third-party KYC and AML verification services that validate identity documents and screen against sanctions and PEP lists.
• Game Software Providers: Licensed game studios — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — who may receive the minimum data necessary (such as a player identifier and session token) to deliver their games to your device. These providers do not receive your full identity data.
• Fraud Detection and Security Providers: Specialist services that analyse transaction patterns and device data to identify and prevent fraudulent activity.
• Cloud Infrastructure and Hosting Providers: Providers who host the tk70 platform infrastructure and are contractually bound to process data only on our documented instructions.
• Customer Support Platforms: Tools used to manage and respond to support tickets and live chat interactions.

All service providers are required to maintain adequate data protection standards and are contractually prohibited from using your data for any purpose other than providing the agreed service to tk70.

5.2 Legal Disclosures. We may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other public bodies where we are required to do so by applicable law, court order, or lawful governmental request. Where permitted, we will notify you of such a request before complying.

5.3 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of tk70's business assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and any material change to the privacy terms that govern your data prior to the transfer taking effect.

5.4 Aggregate and Anonymised Data. We may share aggregated, anonymised, or pseudonymised data (from which individual players cannot be identified) with analytics partners, industry research bodies, or in published platform reports. This data does not constitute personal data and is not subject to the restrictions in this Policy.

6.1 What Are Cookies. Cookies are small text files placed on your device when you visit a website. They serve a variety of functions including keeping you logged in between page visits, remembering your preferences, and helping us understand how the platform is being used. tk70 also uses similar technologies such as local storage and session tokens for equivalent purposes.

6.2 Categories of Cookies We Use.

6.3 Managing Cookies. You can manage your cookie preferences within your tk70 account settings. You may also configure your browser to block or delete cookies, but please note that disabling strictly necessary cookies will prevent you from accessing certain features of the platform, including maintaining an active login session. Browser-level cookie controls vary by browser; consult your browser's help documentation for instructions.

6.4 Third-Party Cookies. Game providers integrated into the tk70 platform may set their own session cookies on your device for the purposes of delivering and maintaining their game sessions. These cookies are governed by the respective provider's own privacy policy. tk70 does not have direct control over third-party game provider cookies, though we require all integrated providers to comply with data protection standards consistent with those set out in this Policy.

7.1 Retention Principle. tk70 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, plus any additional period required by our legal, regulatory, or contractual obligations. When data is no longer required, it is securely deleted or anonymised.

7.2 Active Accounts. For active accounts, personal data is retained for the lifetime of the account plus a post-closure retention period as described in section 7.3 below.

7.3 Post-Closure Retention. Following account closure, we retain the following categories of data for the periods specified:

7.4 Deletion Requests. You may request early deletion of your personal data by contacting our support team. We will action your request to the extent permitted by our legal and regulatory retention obligations. Where we are required to retain certain data despite a deletion request, we will inform you which data must be retained and the reason why.

8.1 Technical Safeguards. tk70 implements a range of technical measures to protect your personal data from unauthorised access, accidental loss, destruction, or alteration. These measures include:

• TLS/SSL encryption for all data transmitted between your device and our servers.
• One-way cryptographic hashing of account passwords — plaintext passwords are never stored.
• Encrypted storage of identity documents and sensitive financial data at rest.
• Firewalls, intrusion detection systems, and rate limiting to protect our infrastructure.
• Regular automated vulnerability scanning and periodic penetration testing of our platform.
• Access controls that restrict employee access to personal data on a strict need-to-know basis.
• Multi-factor authentication requirements for administrative access to production systems.

8.2 Organisational Safeguards. Beyond technical controls, we maintain organisational policies including: mandatory data protection training for all staff with access to personal data; data processing agreements with all third-party service providers; an internal data breach response procedure with defined escalation and notification timelines; and regular review of our data protection practices.

8.3 Your Role in Security. While we implement robust security measures on our side, you also play an important role in keeping your account secure. You should use a strong, unique password for your tk70 account, never share your login credentials with any other person, log out of your account when using shared or public devices, and contact our support team immediately at [email protected] if you suspect that your account has been accessed without your authorisation.

8.4 Data Breach Notification. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, tk70 will notify affected players without undue delay. Notification will be provided via the email address registered to your account and, where appropriate, via a platform-wide notice. We will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures we are taking to address the breach and mitigate its effects.

8.5 No Absolute Guarantee. While we apply industry-standard security practices, no system is completely immune to attack. The transmission of data over the internet carries inherent risks. tk70 cannot guarantee the absolute security of data transmitted to our platform and encourages all players to exercise caution when accessing their accounts over public Wi-Fi or unsecured networks.

9.1 Overview of Your Rights. You have a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our support team in writing at [email protected] with your full name, registered email address, and a description of the right you wish to exercise. We will respond within 30 calendar days.

9.2 Right of Access. You have the right to request a copy of the personal data we hold about you, together with information about how we use it, the categories of data held, the recipients with whom it has been shared, and the retention period applicable to it. We will provide this information in a structured, commonly used, machine-readable format where technically feasible.

9.3 Right to Rectification. If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You can update most account details directly via your account dashboard without needing to contact support.

9.4 Right to Erasure. You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other legal basis applies, or where you have objected to processing and there are no overriding legitimate grounds. Erasure requests will be fulfilled to the extent permitted by our legal and regulatory retention obligations.

9.5 Right to Restriction of Processing. You may request that we restrict the processing of your data in certain circumstances — for example, while we investigate a dispute about the accuracy of your data, or pending the outcome of an objection to processing.

9.6 Right to Data Portability. Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive a copy of your personal data in a portable format and to request that we transmit it directly to another service provider where technically feasible.

9.7 Right to Object. You have the right to object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes. Where you object to marketing processing, we will cease such processing immediately. Where you object to other legitimate-interest processing, we will cease unless we can demonstrate compelling legitimate grounds that override your interests.

9.8 Right to Withdraw Consent. Where we process your data on the basis of your consent — most notably for marketing communications — you may withdraw that consent at any time by: (a) updating your notification preferences in your account dashboard; (b) clicking the unsubscribe link in any promotional email we send you; or (c) contacting our support team at [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

9.9 Automated Decision-Making. tk70 may use automated systems to make certain decisions that affect your account — for example, automated fraud detection that may temporarily restrict your account pending review, or automated responsible gaming interventions triggered by defined behavioural indicators. Where such automated decisions produce significant effects on you, you have the right to request human review of the decision, to express your point of view, and to contest the outcome by contacting our support team.

10.1 Age Restriction. The tk70 platform is strictly prohibited for use by any person under the age of 21. This restriction applies regardless of the laws of the user's jurisdiction of residence. We enforce this restriction through mandatory identity verification (KYC) checks for all accounts that seek to deposit, withdraw, or participate in real-money gaming activity.

10.2 No Knowing Collection of Minor Data. tk70 does not knowingly collect, store, or process personal data belonging to individuals under the age of 21. If you are a parent or guardian and believe that your child has created a tk70 account or provided us with personal data without your consent, please contact us immediately at [email protected].

10.3 Discovery and Deletion. If we become aware at any time — through our own KYC process, a report from a parent or guardian, or any other means — that a user is under the age of 21, we will: (a) immediately suspend the account; (b) reverse any deposits made to the account; (c) permanently close the account; and (d) delete all personal data associated with the account as promptly as our legal obligations permit.

11.1 Cross-Border Processing. tk70 operates as an international offshore platform. This means that the personal data you provide may be transferred to, stored in, and processed in countries other than Bangladesh. This may include countries where data protection laws differ from those applicable in your country of residence.

11.2 Safeguards for Transfers. When we transfer personal data internationally, we ensure appropriate safeguards are in place to protect your data. These safeguards may include: contractual clauses with receiving entities that impose data protection obligations consistent with this Policy; transfers only to service providers who maintain data security standards comparable to those described in Section 8; and limiting the categories of data transferred internationally to the minimum necessary for the relevant processing purpose.

11.3 Game Provider Transfers. Where your data is processed by integrated game providers — such as Evolution Gaming, Pragmatic Play, Spribe, or Ezugi — those providers may operate data infrastructure in multiple jurisdictions. tk70 requires all integrated game providers to maintain data protection standards appropriate for a regulated gaming environment and to process player data only for the purpose of delivering game services.

11.4 Payment Partner Transfers. Transactions processed via bKash, Nagad, Rocket, Upay, and other Bangladeshi payment partners are governed by those providers' own data protection and privacy practices. tk70 shares only the transaction data strictly required to execute your payment instructions with these providers.

12.1 Right to Update. tk70 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, the services we offer, or the third-party providers we work with. All updates will be posted to this page at https://tk70.io/privacy-policy.

12.2 Notification of Material Changes. Where changes to this Policy are material — meaning they significantly affect your rights or the way we process your personal data — we will notify you by email to your registered account address and/or by a prominent notice on the tk70 platform prior to the changes taking effect. The notification will describe the nature of the change and the effective date.

12.3 Effective Date. The current version of this Policy is effective as of 1 January 2026. The "Last Updated" date at the top of the Policy document reflects the date of the most recent revision. We recommend reviewing this Policy periodically to stay informed of how we protect your data.

12.4 Continued Use. Your continued use of the tk70 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree to the updated Policy, you must stop using the platform and may request account closure by contacting our support team.

13.1 Privacy Queries. If you have any questions, concerns, or requests relating to this Privacy Policy or the way tk70 handles your personal data, please contact our support team. We are available 24 hours a day, 7 days a week, and aim to respond to all written privacy-related queries within 30 calendar days of receipt.

13.2 Contact Details. All privacy-related correspondence should be directed to: [email protected]

13.3 Data Subject Requests. To exercise any of the data subject rights described in Section 9 of this Policy, please submit your request in writing to the email address above. Include your full name, your registered tk70 account email address, a clear description of the right you wish to exercise, and any supporting information that will help us locate your account and process your request efficiently. We will acknowledge receipt of your request and respond within 30 calendar days.

13.4 Complaints. If you are not satisfied with our response to a privacy query or data subject request, you have the right to escalate your complaint. tk70 takes all privacy complaints seriously and will engage in good faith to resolve any concerns raised. Please allow our support team a reasonable opportunity to address your complaint before escalating further.