tk977 Privacy Policy — How We Protect Your Personal Data

1 Introduction & Scope

This Privacy Policy ("Policy") describes how tk977 ("tk977", "we", "us", "our") collects, processes, stores, and protects personal data relating to individuals ("you", "Player", "User") who access or use the tk977 platform at https://tk977.io, including its web-based interface, associated services, and all communications originating from tk977.

tk977 is committed to handling your personal data responsibly, transparently, and in line with internationally recognised data protection principles. We recognise the importance of privacy to our players across Bangladesh — from Dhaka and Chittagong to Sylhet, Khulna, Rajshahi, and beyond — and we have designed our data practices accordingly.

By registering an account on tk977, making a deposit, placing a wager, or otherwise using the platform, you acknowledge that you have read this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the tk977 platform.

2 Data We Collect

tk977 collects personal data across several categories depending on how you interact with the platform. The table below summarises the principal categories of data we may collect:

2.1 Data You Provide Directly

The majority of personal data we hold about you is information you voluntarily provide during the account registration process, when completing identity verification, when contacting our support team, or when updating your account profile. Providing accurate and current information is a condition of your account with tk977.

2.2 Data Collected Automatically

When you access the tk977 platform, our systems automatically collect certain technical data about your device and browsing session. This data is used for platform security, fraud prevention, and improving user experience. It does not identify you personally on its own but may be combined with other data held about you.

2.3 Data from Third Parties

In limited circumstances, tk977 may receive personal data about you from third-party sources, including identity verification services used to confirm the authenticity of documents you submit, payment processors confirming the success or failure of transactions, and fraud prevention databases used to identify patterns of potentially harmful activity.

3 How We Use Your Data

tk977 uses your personal data only for legitimate purposes directly connected to the operation of our platform and the provision of our services. The principal purposes for which we process personal data are as follows:

• Account Management: Creating and maintaining your tk977 player account, authenticating your login sessions, and managing account settings and preferences;
• Transaction Processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank transfer channels, and maintaining accurate financial records;
• Identity Verification (KYC): Verifying that you meet the minimum age requirement of 21 years and confirming your identity as required by anti-money laundering obligations;
• Responsible Gaming: Monitoring gaming activity patterns to identify signs of problem gambling and, where appropriate, applying account restrictions, deposit limits, or self-exclusion measures;
• Fraud Prevention & Security: Detecting and preventing fraudulent account activity, unauthorised access, bonus abuse, money laundering, and other forms of platform misuse;
• Customer Support: Responding to queries, complaints, and account-related requests submitted via live chat or email;
• Platform Improvement: Analysing aggregated usage data to improve platform performance, game selection, and overall user experience;
• Legal Compliance: Meeting obligations under applicable law, responding to lawful requests from competent authorities, and maintaining records as required by financial regulation.

4 Legal Basis for Processing

tk977 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between you and tk977, including account creation, payment processing, and game service delivery;
• Legal Obligation: Processing required to comply with applicable anti-money laundering regulations, know-your-customer requirements, and any lawful regulatory or law enforcement requests;
• Legitimate Interests: Processing carried out in pursuit of tk977's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided such interests are not overridden by your fundamental rights and freedoms;
• Consent: Where we rely on your consent as the legal basis for processing — for example, for certain analytical cookies — you retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

5 Data Sharing & Third Parties

5.1 Categories of Recipients

tk977 does not sell or rent your personal data to any third party. We share personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment Processors: bKash, Nagad, Rocket, Upay, and banking partners receive transaction reference data necessary to process deposits and withdrawals;
• Game Providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier to manage game session integrity and RTP reporting;
• Identity Verification Services: Third-party KYC providers receive document images and identity data solely for the purpose of verifying your age and identity;
• IT Infrastructure Providers: Hosting, cloud storage, and cybersecurity service providers who process data on our behalf under binding data processing agreements;
• Law Enforcement & Regulatory Bodies: Where required by applicable law or in response to a lawful order from a competent authority.

5.2 International Data Transfers

Some of tk977's third-party service providers may be located outside of Bangladesh. Where personal data is transferred to recipients in other countries, tk977 takes appropriate steps to ensure that adequate protections are in place, including contractual data protection clauses, to safeguard your data to a standard equivalent to that applied within Bangladesh.

6 Cookies & Tracking

6.1 Types of Cookies Used

The tk977 platform uses the following categories of cookies and similar tracking technologies:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without rendering the platform unusable;
• Analytical Cookies: Used to understand how players navigate and interact with the platform in aggregate. This data helps us identify usability issues and improve the overall experience. These cookies collect anonymised data and do not track you across external websites;
• Preference Cookies: Used to remember your language preferences, display settings, and other personalisation choices between sessions.

6.2 What We Do Not Use

tk977 does not use third-party advertising cookies, cross-site tracking pixels, social media tracking tags, or behavioural profiling technologies. We do not share cookie-derived data with advertising networks.

6.3 Managing Cookies

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will affect the functionality of your tk977 account. Instructions for managing cookies are available in the help section of your preferred browser.

7 Data Retention

tk977 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account Data: Retained for the duration of your active account and for a period of five years following account closure, in line with standard anti-money laundering record-keeping obligations;
• Transaction Records: Financial transaction data is retained for a minimum of five years from the date of the transaction to comply with financial record-keeping requirements;
• Identity Verification Documents: KYC documents are retained for five years following account closure or the last transaction, whichever is later;
• Gaming Activity Logs: Betting and game session records are retained for three years for responsible gaming monitoring and dispute resolution purposes;
• Customer Support Records: Communications and complaint records are retained for three years from the date of the interaction;
• Technical / Session Data: IP addresses and session logs are retained for twelve months for fraud prevention and security purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identified individual.

8 Data Security

tk977 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption of sensitive data fields at rest within our database infrastructure;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing of the platform and its underlying infrastructure;
• Multi-factor authentication requirements for administrative access to production systems;
• Continuous monitoring for suspicious access patterns and automated alerting systems.

Despite these measures, no method of electronic transmission or storage is completely secure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, tk977 will notify affected players without undue delay and take immediate steps to contain and remediate the breach.

9 Your Rights as a Data Subject

As a tk977 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request".

tk977 will acknowledge all data rights requests within 48 hours and provide a substantive response within 14 calendar days. In complex cases, the response period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

10 Children & Minors

The tk977 platform is strictly intended for adults aged 21 years and above. tk977 does not knowingly collect personal data from any person under the age of 21. If we become aware that a minor has provided us with personal data, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a person under 21 years of age has registered an account on tk977 using their personal details or yours, please contact us immediately at [email protected]. We will investigate the matter promptly and take appropriate action.

11 Changes to This Policy

tk977 may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When material changes are made, we will update the "Last Updated" date at the top of this page. Where changes are significant, we may also notify registered players via the email address associated with their account.

Your continued use of the tk977 platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this page periodically to stay informed about how we protect your data. Previous versions of this Policy are available on request by contacting [email protected].

12 Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how tk977 has handled your personal data, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request" or "Privacy Query"
• Response Time: Within 48 hours for acknowledgement; within 14 calendar days for substantive response
• Support Hours: 24/7, Bangladesh Standard Time (UTC+6)

You may also raise concerns about our data practices by submitting a formal complaint via email with the subject line "Formal Privacy Complaint". tk977 treats all privacy complaints seriously and will investigate each one thoroughly before providing a written response.