tkpok Privacy Policy

tkpok collects personal information from you in several ways during the course of your relationship with our platform. We collect only what is necessary to deliver our services safely, comply with applicable regulations, and continuously improve the experience we offer to players across Bangladesh.

Information You Provide Directly

When you register for a tkpok account, you voluntarily provide us with personal data including your full legal name, date of birth, email address, mobile phone number, and a password of your choosing. During Know Your Customer (KYC) verification — which is required before your first withdrawal — you may also be asked to submit copies of government-issued identity documents such as your National ID (NID), passport, or driving licence, along with proof of address documents such as a recent utility bill or bank statement.

When you make a deposit or withdrawal, we collect payment transaction data including the payment method used (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), partial account identifiers associated with that method, transaction reference numbers, amounts in Bangladeshi Taka (৳), and timestamps. We do not store full card numbers or full mobile wallet PINs — sensitive payment credentials are handled directly by your payment provider.

Information Collected Automatically

When you visit and interact with the tkpok website, we automatically collect certain technical and behavioural data. This includes your IP address, browser type and version, operating system, device type, referring URL, pages visited, time spent on each page, bet placement actions, game sessions initiated, and features used. This data is collected via first-party analytics tools, server logs, and cookies as described in Section 4 of this Policy.

Information from Third Parties

In some cases we may receive information about you from trusted third-party sources. This includes identity verification responses from KYC service providers, fraud screening signals from payment processors, and game session data transmitted from our licensed game studio partners such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi. We use this third-party data solely to verify your identity, protect against fraud, and ensure fair game outcomes.

Communications Data

If you contact tkpok support via email at [email protected], we retain the content of your messages, your email address, and the metadata associated with your support interactions. This allows us to provide continuity of service and to resolve disputes with reference to prior correspondence.

tkpok processes your personal data for clearly defined purposes, each of which has a lawful basis. We do not use your data for purposes that are incompatible with the reasons for which it was originally collected. The primary purposes for which we process your personal information are described below.

Account Management and Service Delivery

The most fundamental use of your personal data is to create and maintain your tkpok account, authenticate your identity when you log in, process deposits and withdrawals through bKash, Nagad, Rocket, Upay, Visa, and Mastercard, settle bets and game rounds, apply bonuses and promotions to your account, and provide you with a personalised gaming experience across cricket betting, slots, live casino, Plinko, and Treasure Boat Fishing.

Identity Verification and Regulatory Compliance

tkpok uses your identity and KYC data to verify that you are who you say you are, that you meet the 18+ age requirement, and that your use of the platform is consistent with applicable anti-money-laundering (AML) standards. This processing is necessary for tkpok to fulfil its compliance obligations and to protect the integrity of the platform for all players.

Fraud Prevention and Security

We analyse your account activity, transaction patterns, IP address history, and device fingerprints to detect and prevent fraudulent behaviour, including multi-accounting, bonus abuse, payment chargebacks, and unauthorised account access. Where suspicious activity is detected, we may suspend your account pending investigation and, where required, share relevant data with financial crime authorities.

Customer Support

Your contact data and communication history are used to respond to your support requests, resolve disputes, and provide follow-up assistance. Support records are retained to ensure consistency and accountability in our service interactions with you.

Marketing and Promotional Communications

With your consent, tkpok may send you emails or SMS notifications about promotions, bonuses, new game launches, and seasonal offers relevant to players in Bangladesh — including campaigns timed to BPL, Eid, Pohela Boishakh, and other events. You may withdraw your consent to marketing communications at any time by contacting [email protected]. Withdrawing marketing consent does not affect our ability to send you transactional communications such as deposit confirmations and withdrawal notifications, which are necessary for account management.

Platform Improvement and Analytics

Aggregated and anonymised behavioural data — such as which games are most played, which pages have highest exit rates, and which deposit methods are most popular — is used to improve the tkpok platform's design, performance, and game selection. This processing does not involve personally identifiable information and is used solely for internal product development purposes.

tkpok does not sell your personal data. We do, however, share limited and necessary data with specific categories of trusted third parties in order to operate the platform effectively, meet legal obligations, and protect users. All third parties with whom we share data are contractually required to handle it in accordance with applicable data protection standards.

Game Studio Partners

To facilitate your gameplay on titles provided by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, a unique player session token and anonymised account identifier are transmitted to the relevant game studio. Game studios receive only the data needed to initialise and manage your game session — they do not receive your full name, NID details, or payment method information.

Payment Service Providers

When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, your transaction data is shared with the relevant payment service provider to facilitate the transfer of funds. tkpok shares only the minimum data required for each transaction — typically your registered mobile number or partial card reference and the transaction amount in Bangladeshi Taka (৳).

Identity Verification Providers

To complete KYC verification, your identity document images and personal details may be transmitted to a third-party identity verification service. These providers are subject to strict data processing agreements and are prohibited from using your data for any purpose other than identity verification on behalf of tkpok.

Legal and Regulatory Disclosure

tkpok may be required to disclose your personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities if compelled to do so by a lawful order, warrant, or legal process. In such cases, tkpok will disclose only the minimum information required to satisfy the legal obligation and will, where legally permitted, notify you of such a disclosure.

Business Transfers

In the event that tkpok undergoes a merger, acquisition, or sale of all or a substantial part of its assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and any material change to how your data is processed via the email address registered to your account.

tkpok uses cookies and similar tracking technologies to operate core website functionality, remember your session preferences, analyse platform usage, and deliver a consistent experience across your visits. This section explains the types of cookies we use and how you can manage them.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, remember certain preferences, and track interactions for analytics purposes. Cookies themselves do not contain executable code and cannot access files on your device beyond what they store.

Managing Your Cookie Preferences

You can control and delete cookies through your browser settings. Most modern browsers — including Chrome, Firefox, Safari, and Edge — allow you to block all cookies, block third-party cookies only, or clear cookies that have already been set. Note that disabling essential cookies will impair core platform functionality, including the ability to log in to your tkpok account. Analytics and preference cookies can be disabled without affecting login or betting functionality.

On mobile devices — whether Android or iOS — you can manage cookies through the settings of your mobile browser. If you access tkpok via a browser on your phone in Dhaka, Chittagong, Sylhet, or anywhere else in Bangladesh, the same cookie management options apply as for desktop browsers.

tkpok retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Different categories of data are subject to different retention periods, as outlined below.

Active Account Data

While your tkpok account remains active, we retain all registration data, KYC documents, transaction records, and game history associated with your account. This data is necessary for ongoing service delivery, dispute resolution, and regulatory compliance during the active life of your account.

Post-Closure Retention

Following the closure of your account — whether voluntary, by tkpok's decision, or through self-exclusion — tkpok retains your personal data for a minimum period of five (5) years. This retention period is necessary to comply with anti-money-laundering record-keeping obligations, to respond to any disputes or legal claims that may arise after closure, and to support any regulatory inquiries. Financial transaction records specifically are retained for a minimum of seven (7) years in line with standard financial record-keeping practice.

Marketing Data

If you have consented to marketing communications, your email address and communication preferences are retained until you withdraw your consent. Upon receipt of a valid opt-out request, your details are removed from all marketing lists within 5 business days. A suppression record (containing only your email address and opt-out date) is retained indefinitely to ensure that your preference is respected even if you later re-register.

Anonymised Data

Aggregated and anonymised analytical data — from which no individual can be identified — may be retained indefinitely for internal research and platform development purposes. This data is not personal data and its retention does not affect your privacy rights.

tkpok takes the security of your personal data seriously and has implemented a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, disclosure, or destruction. No online platform can guarantee absolute security, but we apply industry-standard controls and review them regularly.

Encryption

All data transmitted between your browser or mobile device and the tkpok platform is encrypted using 256-bit SSL/TLS encryption. This means that any data you send to or receive from tkpok — including login credentials, deposit requests, and personal details — is unreadable to any third party that might intercept it in transit. Sensitive data at rest, including KYC document images and hashed passwords, is stored using strong encryption algorithms.

Access Controls

Access to personal data within tkpok's internal systems is restricted on a strict need-to-know basis. Only staff whose job function requires access to specific categories of personal data are granted that access, and all internal access is logged and audited. Administrative access to production systems requires multi-factor authentication.

Fraud Detection Systems

tkpok operates real-time fraud detection systems that monitor account activity for patterns indicative of unauthorised access, credential stuffing attacks, and suspicious transaction behaviour. Anomalous activity triggers automatic alerts and, where appropriate, temporary account freezes pending investigation by our security team.

Your Role in Security

While tkpok takes all reasonable technical precautions, the security of your account also depends on you. You are responsible for keeping your tkpok password confidential and for ensuring that no other person has access to your account. We strongly recommend using a strong, unique password for your tkpok account — one that is not reused from any other online service. If you suspect that your account has been accessed without your authorisation, contact [email protected] immediately.

tkpok reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements, or applicable legal and regulatory standards. We take our obligation to keep you informed seriously and will communicate any material changes to this Policy in a clear and timely manner.

How We Notify You of Changes

When we make a material change to this Privacy Policy — one that affects how we collect, use, share, or retain your personal data in a meaningful way — we will notify registered players via email to the address associated with their tkpok account. The notification will summarise the key changes and provide a link to the updated Policy. For minor, non-material changes such as typographical corrections or clarifications that do not alter the substance of our data practices, we may update the Policy without sending an individual notification, though the "Last Updated" date at the top of this page will always reflect the most recent revision.

Your Continued Use Constitutes Acceptance

By continuing to use the tkpok platform after a revised Privacy Policy has been published and communicated, you acknowledge that you have read and understood the updated terms. If you do not agree with any changes to the Policy, you have the right to close your account by contacting [email protected]. Continued account activity after the effective date of a Policy update will be treated as acceptance of the revised terms.

Reviewing This Policy

We recommend that you review this Privacy Policy periodically, even between formal update notifications, to stay informed about how tkpok protects your data. The current version of this Policy is always accessible at tkpok.net/privacy-policy and supersedes all prior versions. The "Last Updated" date shown at the top of this page reflects when the current version came into effect.

Contact Us

If you have any questions about this Privacy Policy, wish to understand more about how tkpok handles your personal data, or want to exercise any of your data rights as described in Section 6, please contact us at [email protected]. Our support team handles Privacy Policy enquiries in English and aims to respond to all written requests within 3 business days. For data rights requests specifically, we will provide a full response within 30 days of receiving your written request.