tkaka Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how tkaka ("we", "us", "the Platform", "the Operator") collects, uses, stores, discloses, and protects personal information provided by users ("you", "User", "Player", "Member") of the tkaka online casino and sports betting service, accessible at tkaka.org and any associated mobile interface (collectively, "the Service").

By accessing the Service, registering an account, making a deposit, or otherwise using the platform in any way, you acknowledge that you have read and understood this Policy, and that you consent to the data practices described herein. If you do not agree to this Policy, you must cease using the Service immediately.

This Policy should be read together with the tkaka Terms and Conditions, which are incorporated by reference. In the event of any conflict between this Policy and the Terms and Conditions on a data-related matter, this Policy shall take precedence.

2. Information We Collect

tkaka collects personal information through multiple touchpoints in the course of operating the Service. The categories of data collected, and the circumstances in which each category arises, are set out below. We collect only the information that is necessary for the purposes described in this Policy.

We do not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data (except where voluntarily disclosed in the context of a responsible gaming request), or biometric data. If you contact our support team, we may retain a record of that communication for quality assurance and dispute resolution purposes.

3. How We Use Your Information

tkaka uses the personal information we collect for specific, defined purposes only. We do not use personal data for any purpose that is incompatible with the original reason it was collected without obtaining fresh consent. The primary purposes for which your data is used are listed below.

• Account creation, verification, and maintenance — including KYC identity checks, age verification, and the enforcement of the one-account-per-person policy
• Processing and recording financial transactions, including deposits via bKash, Nagad, Rocket, and Upay, and processing withdrawal requests to the player's registered payment account
• Providing customer support, responding to enquiries and complaints, and maintaining records of support interactions for dispute resolution and quality assurance purposes
• Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, bonus abuse, and any other conduct that constitutes a breach of the Terms and Conditions
• Monitoring responsible gaming metrics at an individual account level, including session duration, loss patterns, and deposit frequency, to identify players who may benefit from responsible gaming interventions
• Complying with applicable legal and regulatory obligations, including cooperation with anti-money laundering authorities, court orders, law enforcement requests, and tax reporting requirements where applicable

Where tkaka wishes to use your personal data for a purpose not listed above — for example, to send you promotional communications — we will ask for your explicit consent before doing so. You may withdraw consent for marketing communications at any time by contacting support at [email protected]. Withdrawal of consent for marketing communications does not affect the lawfulness of processing already carried out, and does not affect the processing of your data for the non-marketing purposes listed above.

4. Legal Basis for Processing

tkaka processes personal data only where a valid legal basis exists for doing so. The three principal legal bases on which tkaka relies are set out below.

5. Disclosure of Your Information

tkaka does not disclose your personal information to third parties except in the specific circumstances described below. All third parties to whom tkaka discloses personal data are required to handle that data in a manner consistent with this Policy and with applicable data protection principles.

• Payment processors and mobile banking intermediaries (such as the infrastructure providers that facilitate bKash and Nagad transactions) — disclosed only to the extent necessary to process and verify your financial transactions
• Game content providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) — these providers may receive technical session identifiers and bet data necessary to serve game content and settle outcomes; they do not receive your full personal profile
• Regulatory and law enforcement authorities — where tkaka is legally compelled to disclose data by a court order, statutory demand, or lawful request from a competent authority, including anti-money laundering bodies or financial intelligence units
• Identity verification service providers engaged to carry out KYC document checks — these providers process only the identity document data required for verification and operate under strict confidentiality and data processing agreements with tkaka

6. Data Security

tkaka implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures are reviewed and updated on a regular basis in line with evolving security standards and the nature of the data we hold.

Despite these measures, no transmission of data over the internet is guaranteed to be completely secure, and tkaka cannot provide an absolute assurance that information you transmit to the platform will not be intercepted by a third party. You use the Service at your own risk insofar as transmission security is concerned, and tkaka encourages you to take all reasonable precautions to protect your own device and account credentials.

Our Key Security Measures

• 256-bit SSL/TLS encryption for all data transmitted between user devices and tkaka servers, preventing interception during transit
• Encrypted storage of personal and financial data on secure servers with restricted access controls limited to authorised personnel only
• Regular security audits and penetration testing conducted to identify and remediate vulnerabilities before they can be exploited
• Automated fraud detection systems that continuously monitor account activity for patterns consistent with unauthorised access, identity fraud, or financial crime

7. Data Retention

tkaka retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law, whichever is longer. Account data and transaction records are retained for a minimum of five years following account closure or the date of the last transaction (whichever is later) to satisfy anti-money laundering record-keeping requirements and to enable the resolution of any dispute that may arise after closure.

KYC identity documents are retained for the same minimum five-year period. Device and session log data is retained for a shorter period (typically 12 to 24 months) unless it is relevant to an ongoing investigation or dispute. When the applicable retention period expires and there is no other legal basis for continued retention, we securely delete or anonymise the relevant data.

8. Cookies and Tracking Technologies

tkaka uses cookies and similar tracking technologies on its platform. A cookie is a small data file placed on your device by a web server when you visit a website. Cookies allow us to recognise your device on return visits, to maintain your session while you are logged in, and to collect analytical data about how the platform is used. The categories of cookies we use are described below.

You can control cookie settings through your browser's privacy or settings menu. Most browsers allow you to refuse new cookies, delete existing cookies, and receive notification when a new cookie is placed. Note that disabling essential cookies will impair core platform functionality. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

9. Your Data Rights

As a user of tkaka, you have a number of rights in relation to the personal data we hold about you. These rights are set out below. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 72 hours and aim to respond in full within 30 days, subject to any complexity or volume of requests.

• Right of Access — you may request a copy of all personal data tkaka holds about you, along with information about how it is being processed and the legal basis for that processing
• Right to Rectification — if any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay
• Right to Erasure — you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (if consent was the basis for processing), or where the data has been unlawfully processed; this right is subject to our legal retention obligations
• Right to Restriction — in certain circumstances you may request that we restrict the processing of your personal data rather than delete it, for example while a dispute about its accuracy is being resolved
• Right to Data Portability — where processing is based on your consent or on contract performance, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider
• Right to Object — you have the right to object to processing of your personal data where that processing is based on our legitimate interests; we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests

Right to Withdraw Consent — where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. To withdraw consent for marketing communications or analytics cookies, contact us at [email protected] or adjust your browser settings respectively.

10. Children's Privacy

The tkaka Service is strictly intended for persons aged 21 years and above. tkaka does not knowingly collect personal data from individuals under the age of 21. The platform employs age verification checks at registration and prior to the processing of any withdrawal to prevent access by minors.

11. Third-Party Services and Links

The tkaka platform integrates content and functionality from third-party game providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and other licensed game studios. These providers operate their game engines under their own data practices and privacy frameworks. When you participate in a game delivered by a third-party provider, a limited set of session and bet data is shared with that provider as described in Section 5. tkaka is not responsible for the privacy practices of these third-party providers beyond what is governed by the data processing agreements in place.

The tkaka platform does not contain links to external websites. If you arrive at a third-party website by any means, please be aware that its privacy policy will govern any personal data you provide there, and that tkaka has no control over and accepts no responsibility for that website's content or data handling practices.

12. International Data Transfers

tkaka's primary operations are focused on the Bangladesh market. However, certain technical infrastructure components — such as server hosting, game content delivery networks, and fraud detection systems — may involve the processing of data in jurisdictions outside Bangladesh. Where such transfers occur, tkaka takes appropriate steps to ensure that your personal data is protected to a standard equivalent to that described in this Policy.

Where personal data is transferred to a third country, tkaka relies on appropriate safeguards such as contractual data processing agreements with the receiving party that impose obligations equivalent to those described in this Policy. If you would like further information about the international data transfer safeguards applicable to your personal data, please contact us at [email protected].

13. Changes to This Privacy Policy

tkaka reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or changes to the nature of the Service. The date of the most recent revision is displayed at the top of this page. Where a material change is made to this Policy, tkaka will use reasonable endeavours to notify registered account holders by displaying a prominent notice on the platform.

Your continued use of the Service following any update to this Privacy Policy constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed of any changes. If you have concerns about any change to this Policy, you may contact us at [email protected] or request account closure if you no longer wish to use the Service under the revised terms.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way tkaka handles your personal data, please contact our dedicated privacy team. We aim to respond to all privacy-related enquiries within 72 hours during Bangladesh Standard Time (BST, UTC+6) business hours.

Please include your registered mobile number or account username in your message so that we can locate your account and respond accurately. Do not include your password or full payment details in any correspondence with tkaka.