tk73 Privacy Policy —
How We Handle Your Personal Data

About This Policy

This Privacy Policy ("Policy") describes how tk73 ("we", "us", "our", "the Platform") collects, uses, stores, and shares personal data provided by or generated by individuals ("you", "the Player", "the User") who visit, register on, or interact with the tk73 website at tk73.io, including all associated sub-pages, services, betting markets, casino games, promotions, and mobile-accessible interfaces.

By creating a tk73 account or by continuing to use the platform after this Policy has been published or updated, you acknowledge that you have read, understood, and accepted the data practices described herein. If you do not agree with any part of this Policy, you must discontinue use of the platform and request account closure.

This Policy should be read alongside tk73's Terms & Conditions and Responsible Gaming Policy, both of which are published on this website. Where a conflict arises between this Policy and a more specific data-handling notice provided at the point of collection, the more specific notice shall take precedence in respect of that specific processing activity.

Data We Collect

tk73 collects the following categories of personal data. We collect only what is necessary to deliver our services, verify identity, comply with legal obligations, and maintain platform security.

We do not collect sensitive data categories such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or biometric data beyond what is inherent in identity document photographs submitted for KYC verification purposes.

How We Collect Data

tk73 collects personal data through the following channels and mechanisms:

• Direct registration: When you complete the account registration form on tk73, you provide us with your name, date of birth, contact details, and preferred payment method.
• Identity verification (KYC): When you submit documents to verify your identity or age, we collect the information contained within those documents.
• Financial transactions: When you make a deposit or submit a withdrawal request, our payment processing partners transmit transaction metadata to us, including the originating payment account identifier and transaction amount.
• Platform activity: Our servers automatically log technical and usage data as you interact with the platform — including pages visited, games launched, bets placed, and session duration.
• Cookies and tracking technologies: We use first-party cookies and similar technologies to maintain your session, remember your preferences, and collect aggregate usage analytics. See Section 8 for full details.
• Customer support interactions: When you contact our support team via live chat or email, we collect and retain records of those communications to resolve your query and for quality assurance purposes.
• Promotional participation: When you opt into a promotion, tournament, or bonus offer, we may collect additional data such as your preferred game category or promotional preferences.

How We Use Your Data

tk73 uses the personal data we collect for the following specific and legitimate purposes:

• Account management: To create and maintain your player account, authenticate your identity when you log in, and manage your account settings and preferences.
• Age and identity verification: To confirm that you meet the minimum age requirement of 21 years and that the identity you have provided is genuine. This is a legal and regulatory obligation we take seriously.
• Payment processing: To facilitate deposits to your tk73 account and to process withdrawal requests to your nominated payment method (bKash, Nagad, Rocket, Upay, bank transfer, or card).
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multiple-account abuse, bonus abuse, and other prohibited conduct on the platform.
• Responsible gaming: To monitor your gaming patterns, identify early indicators of problem gambling, enforce deposit or loss limits you have set, and proactively reach out if our systems flag concerning behaviour.
• Customer support: To respond to your queries, resolve disputes, process complaints, and provide technical assistance.
• Platform improvement: To analyse aggregate usage data and understand how players interact with our games and features, enabling us to improve performance and introduce new functionality.
• Legal compliance: To comply with applicable laws, respond to lawful requests from regulatory authorities, and fulfil our obligations under anti-money laundering and counter-terrorism financing frameworks.
• Service communications: To send you transaction confirmations, account security alerts, and updates to our Terms & Conditions or Privacy Policy.
• Promotional communications: Where you have given explicit consent, to inform you about bonuses, tournaments, and seasonal promotions relevant to your interests — such as BPL and IPL cricket betting offers, Eid promotions, or Pohela Boishakh specials.

Legal Basis for Processing

tk73 processes your personal data only where a valid legal basis exists. The following legal bases apply to our processing activities:

• Contractual necessity: Processing your identity data, contact data, and financial data is necessary to perform the contract we have with you — namely, the provision of online betting and gaming services under our Terms & Conditions. Without this processing, we cannot operate your account.
• Legal obligation: We are required by applicable law to verify player identity, retain transaction records, report suspicious activity, and enforce minimum age restrictions. Processing for these purposes is mandatory regardless of consent.
• Legitimate interests: We process technical and usage data to maintain platform security, prevent fraud, improve our services, and enforce our Terms & Conditions. We have assessed that these legitimate interests are not overridden by your fundamental rights and freedoms, given the limited scope of the data processed and the clear benefit to all platform users.
• Consent: We rely on your consent for the sending of optional promotional and marketing communications. You may withdraw this consent at any time without penalty.

Data Sharing & Disclosure

tk73 does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited and controlled circumstances:

• Payment processors: Your financial data is shared with certified payment processing partners (including providers supporting bKash, Nagad, Rocket, Upay, Visa, and Mastercard) solely to facilitate the transaction you have initiated. These partners process data under strict contractual obligations and are not permitted to use it for any other purpose.
• Game content providers: When you launch a game from a third-party provider (such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, or Ezugi), your session data and game activity may be processed by that provider's systems in order to deliver the game. These providers are bound by data processing agreements.
• Identity verification services: We may share identity documents or data points with third-party KYC and AML (anti-money laundering) verification services to confirm the authenticity of documents you have submitted.
• Fraud prevention databases: We may cross-reference account data with industry fraud prevention databases to detect and prevent multiple-account abuse or the use of stolen payment credentials.
• Legal and regulatory authorities: We will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where we are legally required to do so under a valid legal order, warrant, or applicable statutory obligation.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of our business assets, personal data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified by email in advance of any such transfer.

Data Retention

tk73 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes that may arise. The following general retention periods apply:

• Active account data: Identity, contact, and financial data is retained for the duration of your account's active status, plus a minimum period of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction records: Records of all deposits, withdrawals, bets, and game rounds are retained for a minimum of five (5) years from the date of the transaction.
• KYC verification documents: Identity documents submitted as part of the KYC process are retained for the duration of your account plus five (5) years post-closure.
• Support communications: Customer support correspondence is retained for a period of three (3) years from the date of the interaction, or longer if the communication relates to a dispute that remains unresolved.
• Technical and usage data: Server logs and aggregated usage analytics are retained for up to two (2) years. After this period, data is either deleted or anonymised so that it can no longer be associated with any individual.
• Marketing preferences: Records of your marketing consent or opt-out are retained for a period of three (3) years after your last interaction with any marketing communication, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not immediately practicable due to technical constraints, the data is quarantined and access-restricted until secure deletion can be completed.

Cookies & Tracking Technologies

tk73 uses cookies and similar client-side technologies to operate and improve the platform. The following cookie categories are in use:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, remember your account state between pages, and protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Functional cookies: These cookies remember your preferences, such as your preferred language, default stake size, and notification settings, so that you do not have to re-enter them on every visit.
• Analytics cookies: We use first-party analytics tools to understand how players navigate the platform — which games are most popular, how long players spend on different sections, and which features drive the most engagement. This data is collected in aggregate and is not used to identify individual players.
• Security cookies: These cookies support our fraud detection and account security systems by flagging unusual login patterns or device changes that may indicate unauthorised access.

tk73 does not use third-party advertising cookies or permit third-party ad networks to place cookies on our platform. We do not engage in behavioural advertising or retargeting.

You can manage your cookie preferences through your browser's settings at any time. Most browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging into your account and using the platform.

Data Security

tk73 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security controls include:

• SSL/TLS encryption: All data transmitted between your device and our servers is encrypted using Transport Layer Security (TLS 1.2 or higher). This ensures that your login credentials, payment data, and personal information cannot be intercepted in transit.
• Encrypted storage: Sensitive fields including passwords (stored as one-way hashed values), payment account identifiers, and identity document references are encrypted at rest using industry-standard algorithms.
• Access controls: Access to personal data within tk73's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required for their specific role. All internal access is logged and subject to periodic review.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their accounts for an additional layer of login security. Internal system administrators are required to use 2FA.
• Penetration testing and security audits: Our platform undergoes regular security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: tk73 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected players without undue delay.

While we take every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for ensuring that your device is protected by up-to-date security software.

Your Rights

tk73 respects your rights over your personal data. As a registered player, you are entitled to exercise the following rights at any time by contacting us at [email protected]:

• Right of access: You may request a copy of all personal data that tk73 holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Some data corrections (e.g., changes to your registered name) may require documentary evidence.
• Right to erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to overriding legal retention obligations — for example, we are not able to delete transaction records that we are legally required to retain for five years.
• Right to restrict processing: You may request that we restrict the use of your personal data in specific circumstances — for example, while a complaint is being investigated.
• Right to data portability: You may request that we provide your personal data in a structured, commonly used, and machine-readable format so that you can transfer it to another service provider.
• Right to object: You have the right to object to processing based on our legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Children & Minors

tk73 operates a strict minimum age policy of 21 years. Our platform is not intended for, and must not be used by, any person under the age of 21. We do not knowingly collect personal data from individuals who are under 21 years of age.

If we become aware that a registered account belongs to a person under 21, or if we receive credible information suggesting that an account holder may be a minor, we will:

• Immediately suspend the account pending investigation;
• Void any bets placed or games played during the period of suspected underage use;
• Return any deposited funds (after deducting any bonus amounts applied to the account) to the originating payment method; and
• Permanently close the account and delete all associated personal data to the extent permitted by law.

If you believe that a minor has registered on tk73, please contact us immediately at [email protected] so that we can investigate and take action without delay.

Third-Party Links

The tk73 platform may contain references to third-party game providers, payment service partners, or other services. While these are integral to delivering our betting and gaming experience, each third-party provider operates under its own privacy policy and data handling practices.

tk73 is not responsible for the privacy practices of third-party providers whose services are integrated into our platform. When a game from a provider such as Pragmatic Play, Evolution Gaming, or Spribe is launched within tk73, that provider may collect certain technical and gameplay data as described in their own privacy documentation.

We recommend reviewing the privacy policies of any third-party provider whose services you use through our platform if you have specific concerns about how they handle personal data. tk73 does not control and cannot accept responsibility for third-party data practices.

Policy Amendments

tk73 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, the introduction of new services, changes in applicable law, or feedback from players and regulators.

When we make material changes to this Policy, we will update the "Last Updated" date displayed at the top of this page. For significant changes that substantially affect how we use your personal data, we will additionally notify registered players via email to the address associated with their account, providing a summary of the key changes and a link to the updated Policy.

Your continued use of the tk73 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should stop using the platform and request account closure, after which we will handle your personal data in accordance with our retention obligations as described in Section 7.

Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about how tk73 handles your personal data, please contact our Data Protection team using the details below:

• Email: [email protected]
• Subject line: Please use "Privacy Policy Query" or "Data Rights Request" to ensure your message is routed to the correct team.
• Response time: We aim to acknowledge all privacy-related queries within 24 hours and to provide a substantive response within 30 days (Bangladesh Standard Time, UTC+6).

When submitting a data rights request, please include your registered email address and, where relevant, your account username so that we can verify your identity before processing the request. We may ask for additional verification information to protect your account from unauthorised data access requests.