tk887 Privacy Policy

1 Data We Collect

When you interact with the tk887 platform, we collect personal data in the following categories. In each case, we have identified the lawful basis under which the processing is carried out. The primary lawful bases used by tk887 are: contract performance (processing necessary to deliver the Services you have requested), legal obligation (processing required to comply with anti-money laundering, KYC, and age-verification laws), legitimate interest (fraud prevention, platform security, and product improvement), and consent (marketing communications).

When you create an account on tk887, we collect your chosen username, email address, date of birth, full legal name, and country of residence. This information is collected at the point of registration and is essential for creating and maintaining your account. Basis: contract performance and legal obligation.

Prior to processing your first withdrawal, we are required to verify your identity. At this stage, we collect copies of government-issued photo identification (Bangladesh National Identity Card or valid passport), proof of address (utility bill, bank statement, or mobile financial service statement dated within 90 days), and, where required, source-of-funds documentation. Basis: legal obligation.

We record all deposit and withdrawal transactions on the platform, including the amount in BDT, the payment method used (bKash, Nagad, Rocket, Upay, bank transfer, Visa, or Mastercard), the transaction reference number, and the timestamp in Bangladesh Standard Time (BST, UTC+6). We do not store full card numbers; card transactions are tokenised by our payment processor. Basis: contract performance and legal obligation.

We record a complete history of all wagers placed, games played, sports bets accepted, bet outcomes, and bonus activity on your account. This data is used for account statement purposes, dispute resolution, responsible gaming monitoring, and regulatory reporting. Basis: contract performance and legitimate interest.

When you access the tk887 platform, our servers automatically log your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session duration. This technical data is used for fraud detection, platform security, and performance optimisation. Basis: legitimate interest.

If you contact our support team by email, live chat, or any other channel, we retain a record of that correspondence, including your name, contact details, the content of the communication, and the resolution outcome. This data allows us to maintain consistent, high-quality support and to refer to prior interactions when necessary. Basis: legitimate interest and contract performance.

2 How We Use Your Data

tk887 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with those stated at the time of collection.

Purpose	Data Used	Lawful Basis
Account creation and management	Registration data, email address	Contract performance
Age and identity verification (KYC)	KYC documents, date of birth	Legal obligation
Processing deposits and withdrawals	Financial transaction data, payment method details	Contract performance
Fraud prevention and anti-money laundering	Transaction data, device data, IP address	Legal obligation, legitimate interest
Responsible gaming monitoring	Gameplay data, deposit frequency, session duration	Legal obligation, legitimate interest
Customer support	Communications data, account data	Contract performance, legitimate interest
Platform security and technical maintenance	Device data, IP address, session logs	Legitimate interest
Marketing and personalised promotions	Email, gameplay preferences, communication history	Consent
Regulatory reporting and compliance	Identity data, transaction data, gameplay records	Legal obligation

Where we rely on consent as the lawful basis — specifically for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of any processing carried out before withdrawal. To withdraw consent for marketing, update your preferences in the Account Settings section or email [email protected].

3 Data Sharing & Third Parties

tk887 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We do, however, share data with carefully selected service partners where necessary to deliver the platform's Services. All third-party data processors are subject to formal data processing agreements that restrict their use of your data strictly to the purposes described below.

To deliver casino games and live dealer tables, tk887 integrates with internationally licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a player session token, which is a pseudonymous identifier, to authenticate your game session. They do not receive your full name, payment details, or government ID.

To facilitate bKash, Nagad, Rocket, Upay, and card transactions, we work with licensed payment gateway partners. These partners receive only the data required to execute and reconcile your specific transaction. Card data is tokenised and never stored on tk887's servers in raw form.

KYC document verification may be processed by a third-party identity verification service. Such services receive a copy of your submitted documents and return a verification result. These partners are bound by strict confidentiality agreements and data retention limits.

tk887 may be required to disclose personal data to government authorities, regulatory bodies, law enforcement agencies, or courts where we are legally compelled to do so. In such cases, we will disclose only the minimum data required to satisfy the legal obligation and will, where permitted by law, notify you of such disclosure.

• We do not share data with social media platforms for advertising targeting purposes.
• We do not use data brokers or third-party data enrichment services.
• Any third party that receives your data is screened for data protection compliance before engagement.
• International transfers of data are protected by appropriate contractual safeguards.

4 Cookies & Tracking Technologies

The tk887 platform uses cookies and similar tracking technologies to maintain your session, remember your preferences, analyse platform usage, and detect fraudulent activity. A cookie is a small text file placed on your device by a website. Cookies cannot execute code and cannot be used to access other data on your device.

Cookie Type	Purpose	Duration
Strictly Necessary	Maintain your login session, remember your account state, enable secure transactions. Cannot be disabled without breaking core functionality.	Session / 24 hours
Functional	Remember your language and display preferences, game lobby layout, and responsible gaming settings such as deposit limits.	30 days
Analytics	Understand how Players navigate the platform, which features are most used, and where technical issues occur. Data is aggregated and pseudonymous.	90 days
Security	Detect and prevent fraudulent login attempts, bot activity, and account takeover. Cross-referenced with device fingerprint data.	Session / 7 days

You may control cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in or using transactional features of the platform. Disabling analytics cookies will not affect your ability to play or bet. Note that clearing your browser cookies will log you out of your active session and may reset your saved preferences.

5 Data Retention

tk887 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and registration data: Retained for the duration of your account and for a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later, in compliance with financial crime prevention obligations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction to support regulatory reporting and dispute resolution.
• Gameplay history: Retained for 2 years from the date of each session for responsible gaming monitoring and dispute purposes, then anonymised.
• Customer support correspondence: Retained for 2 years from the date of the last interaction.
• Marketing preferences and consent records: Retained for 3 years from the date consent was last updated.
• Device and technical logs: Retained for 90 days in a raw form, then aggregated and anonymised.

When data is no longer required to be retained, it is securely deleted or irreversibly anonymised. We do not retain personal data in identifiable form beyond the periods stated above unless compelled by a specific legal obligation to do so.

6 Data Security Measures

tk887 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes, but is not limited to, the following controls:

• TLS 1.2 / 1.3 encryption on all data transmitted between your browser or app and our servers.
• AES-256 encryption at rest for all stored personal data and financial records.
• Multi-factor authentication (MFA) available and strongly recommended for all player accounts.
• Role-based access control ensuring that only authorised personnel can access personal data, and only to the extent required for their job function.
• Regular independent security audits of our infrastructure, application code, and data handling processes.
• Penetration testing conducted at least annually by qualified third-party security firms.
• Real-time intrusion detection and monitoring on all production systems.
• Incident response procedures that ensure material data breaches are identified, contained, and where required, notified to relevant authorities within the timeframes required by applicable law.

While tk887 makes every reasonable effort to protect your personal data, no method of electronic transmission or storage is 100% secure. You play an important role in account security by choosing a strong, unique password and not sharing your login credentials with any third party. If you suspect that your account has been compromised, contact [email protected] immediately.

7 Your Privacy Rights

Regardless of your location, tk887 recognises and upholds the following individual rights in relation to your personal data. To exercise any of these rights, submit a request to [email protected] with the subject line "Privacy Rights Request" and your registered account username. We will respond within 30 calendar days of receiving a valid request. In some cases, we may need to verify your identity before processing a request.

You have the right to request a copy of all personal data we hold about you. This includes your account data, transaction history, KYC records, gameplay records, and any marketing preferences we have recorded. We will provide this in a structured, machine-readable format where feasible.

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details, you may update many fields directly in your account settings. For KYC documents and date-of-birth corrections, please contact the support team with the correct documentation.

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing. Note that we may be unable to fully erase data that we are legally obliged to retain — such as KYC records and transaction logs required by anti-money laundering regulations. In such cases, we will inform you of the specific data that cannot be erased and the reason.

Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format (such as JSON or CSV). You may also request that this data be transmitted directly to another data controller where technically feasible.

You may object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of such an objection, we will cease processing your data for marketing purposes immediately. You may also update your marketing preferences directly through your account settings page.

In certain circumstances, you have the right to request that we restrict the processing of your personal data — for example, while the accuracy of data you have contested is being verified, or while an objection you have raised is being considered. During a restriction period, we will continue to store your data but will not actively process it beyond what is legally required.

8 Policy Updates & Contact

tk887 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or changes in the services we offer. When we make material changes to this policy, we will notify registered players by email to the address on file no fewer than 14 days before the revised policy takes effect. The "Last reviewed and updated" date at the top of this page will be updated accordingly.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. The current version of this policy is always accessible at https://tk887.bet/privacy-policy. Your continued use of the tk887 platform following the effective date of any revision constitutes your acceptance of the updated policy. If you do not agree with a material change, you may close your account before the effective date without penalty.

Data Controller: tk887 is the data controller responsible for personal data processed in connection with the platform at https://tk887.bet.

Contact Us: For all privacy-related enquiries, data subject requests, or concerns about how your personal data is handled, please contact our support team at [email protected]. Our support team is available 24 hours a day, 7 days a week, and responds to privacy enquiries within 2 business days (BST).

If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction. tk887 cooperates fully with all properly constituted regulatory investigations.