tk825 Privacy Policy

This Privacy Policy ("Policy") describes how tk825 ("tk825", "we", "us", or "our") collects, uses, discloses, stores, and protects the personal information of individuals ("you", "your", or "the Member") who access or use the website located at tk825.ws, including all associated pages, features, services, and content provided under the tk825 brand.

tk825 operates as an offshore online betting and casino platform serving players primarily based in Bangladesh. We take our data protection responsibilities seriously. This Policy has been written in plain English so that every member clearly understands how their personal information is handled, regardless of their technical or legal background.

This Policy should be read alongside the tk825 Terms & Conditions and the Responsible Gaming policy, both of which are incorporated by reference into this document. Where there is any conflict between this Policy and the Terms & Conditions on a data protection matter, this Privacy Policy shall take precedence.

tk825 collects personal data across several categories, depending on how you interact with the platform. The table below summarises the main categories of data we collect, along with specific examples within each category.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data beyond what is necessary for responsible gaming purposes, or biometric data. If you voluntarily disclose such information to our support team, it will be treated with the highest level of confidentiality and used solely to address your specific enquiry.

tk825 collects personal data through the following channels and mechanisms:

• Direct Submission: When you register an account, you voluntarily provide identity and contact data via the registration form. Additional data is collected when you make deposits or withdrawal requests, submit verification documents, or contact customer support.
• Automated Technical Collection: When you visit tk825.ws, our servers and analytics systems automatically collect technical data including your IP address, device identifiers, browser fingerprint, and session activity. This data is collected whether or not you are logged in to an account.
• Cookies and Local Storage: tk825 uses first-party cookies and browser local storage to maintain session state, remember your preferences, and measure platform performance. See Section 6 for full details on our cookie practices.
• Payment Processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a card network, our payment partners may share transaction confirmation data and partial account identifiers with us to reconcile your account balance.
• Identity Verification Partners: If your account is subject to enhanced KYC (Know Your Customer) checks, we may engage a third-party identity verification provider who will collect and process your document data on our behalf.
• Fraud Prevention Services: We work with fraud detection platforms that analyse transaction patterns and device signals to identify suspicious activity. These services may provide us with risk scores associated with specific interactions.

We process your personal data only where we have a lawful basis for doing so. The table below identifies our processing purposes and the corresponding legal basis for each.

tk825 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following specific circumstances, and only to the minimum extent necessary for the stated purpose:

• Payment Processing Partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard receive the transaction details necessary to process your deposits and withdrawals. These parties act as independent data controllers for their own processing activities and are subject to their own privacy policies.
• Identity Verification Providers: Third-party KYC and AML compliance vendors who assist us in verifying the identity and age of members. These vendors process your document data solely on our instructions and under strict data processing agreements.
• Fraud Prevention and Security Services: Specialist fraud detection platforms that help us identify and prevent fraudulent account activity, unauthorised access, and financial crime. Data shared is limited to transaction metadata, device signals, and risk indicators.
• IT Infrastructure and Cloud Service Providers: Hosting, database, and cloud infrastructure providers who store and process platform data on our behalf under contractual data protection obligations.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or the request of a competent regulatory or law enforcement authority, we may disclose your personal data without prior notice to you.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a substantial part of tk825's assets, personal data held by the platform may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party service providers who process personal data on our behalf are required to enter into written data processing agreements with tk825 and to implement appropriate technical and organisational security measures consistent with this Policy.

tk825 uses cookies and similar browser-based technologies to operate the platform effectively and to understand how members interact with the site. The following table summarises the types of cookies we use:

tk825 does not use third-party advertising cookies, cross-site tracking pixels, or social media retargeting scripts. Strictly necessary cookies cannot be disabled, as they are essential for the platform to function. You may manage functional and analytics cookies through your browser settings, but doing so may affect your experience on the platform.

tk825 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS Encryption: All data in transit between your device and our servers is encrypted using industry-standard TLS protocols. Our SSL certificate is kept current and covers all subdomains and API endpoints.
• Encryption at Rest: Sensitive data fields including identity documents, financial account references, and authentication credentials are encrypted at the database level using AES-256 encryption.
• Access Controls: Access to personal data within our organisation is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of system access required to perform their job function. All access is logged and subject to periodic review.
• Password Security: Member passwords are never stored in plain text. We apply strong one-way hashing algorithms with per-user salting to all stored password values.
• Vulnerability Management: Our technical infrastructure undergoes regular security assessments and penetration testing. Identified vulnerabilities are triaged and remediated according to their severity rating.
• Incident Response: In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected members, tk825 will notify affected users promptly and take all available measures to contain and remediate the incident.

tk825 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by our legal and regulatory obligations. The following retention periods apply as a general guide:

When a retention period expires, the relevant data is either securely deleted from our systems or irreversibly anonymised so that it can no longer be associated with any identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

As a member of the tk825 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request" and a clear description of your request. We will acknowledge your request within 3 business days and respond in full within 30 calendar days.

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been processed unlawfully. This right is subject to our legal and regulatory retention obligations, which may override a deletion request.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, you may request that we provide your personal data to you in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to processing that is based on our legitimate interest. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

The tk825 platform is strictly intended for adults aged 21 years and over. We do not knowingly collect personal data from any individual under the age of 21. If we become aware that personal data has been collected from a person under the minimum age threshold, we will immediately suspend the associated account, delete the personal data, and void any associated transaction history.

If you are a parent or guardian and believe that a minor in your care has registered an account or provided personal data to tk825, please contact us immediately at [email protected]. We will investigate and respond on a priority basis within 24 hours.

As an offshore platform, tk825 may process and store personal data on servers located outside of Bangladesh. Where personal data is transferred internationally, we take steps to ensure that appropriate safeguards are in place to protect that data to a standard consistent with this Privacy Policy. These safeguards may include contractual data protection clauses with receiving parties, or reliance on the data protection framework of the receiving country.

By using the tk825 platform, you acknowledge and consent to the international transfer of your personal data under the conditions described in this section. If you have questions about the specific safeguards applicable to any particular transfer, please contact us at [email protected].

The tk825 platform may contain references to third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. While we work exclusively with reputable, licensed game studios, these providers operate their own platforms and data practices. Any data you transmit directly to a third-party game environment (outside of the tk825 wrapper) is subject to that provider's own privacy policy.

tk825 is not responsible for the privacy practices or content of any third-party services. We recommend reviewing the privacy policies of any third-party providers whose services you access in connection with your use of tk825.

tk825 reserves the right to update or revise this Privacy Policy at any time. When changes are made, the revised Policy will be published on this page with an updated "Last Updated" date at the top. Where changes are material — meaning they significantly affect how we use your personal data or your rights — we will provide additional notice via email to your registered address or via a platform notification prior to the changes taking effect.

Your continued use of the tk825 platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you should discontinue use of the platform and request account closure before the revised Policy takes effect.

For all privacy-related enquiries, data subject rights requests, or concerns about how tk825 handles your personal information, please contact our data protection team using the details below. All privacy requests are handled on a confidential basis.

• Email : [email protected] (plain text — not a clickable link)
• Subject Line: Use "Privacy Request" to ensure your message is routed directly to the correct team
• Response Time: We acknowledge all privacy requests within 3 business days and aim to resolve them within 30 calendar days
• Operating Hours: Our support team is available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter through appropriate legal channels available in your jurisdiction. tk825 is committed to resolving all privacy concerns in good faith and will cooperate fully with any legitimate regulatory enquiry.