Privacy Policy — How tk34 Handles Your Personal Data

1 Introduction

tk34 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every player who uses our platform. This Privacy Policy sets out in clear, plain English precisely what data we collect about you, the purposes for which we use it, the grounds on which we process it, and the choices and rights available to you.

This policy applies to all personal data processed by tk34 in connection with your use of the platform accessible at https://tk34.io, including all sub-pages, mobile-optimised interfaces, and any communication channels operated by tk34 such as email support and live chat. It applies to all players accessing the platform from Bangladesh and any other jurisdiction.

This Privacy Policy should be read alongside the tk34 Terms & Conditions and Responsible Gaming Policy, both of which are published on the platform and are incorporated by reference. In the event of any conflict between this policy and another tk34 document, this Privacy Policy governs in relation to data protection matters.

We may update this policy from time to time. The version displayed on this page with the effective date shown above is the current operative version. We encourage you to review this policy periodically to stay informed about how we protect your data.

2 Data We Collect

tk34 collects personal data from you directly when you register an account, make a deposit or withdrawal, contact support, or interact with the platform. We also collect certain data automatically when you browse or use our services. The categories of data we collect are described below.

2.1 Registration & Account Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify that you are aged 21 or above).
• Email address used to register your account.
• Mobile phone number linked to your account.
• Residential address (city, district, postal code, Bangladesh).
• Account username and encrypted password hash.

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identity documents (National ID card, passport, or driving licence).
• Proof of address documents (utility bills, bank statements, or official correspondence dated within the last 3 months).
• Selfie photographs taken alongside an identity document, where requested by the compliance team.
• Proof of payment method ownership (bKash account confirmation, Nagad account confirmation, or bank statement).

2.3 Financial Transaction Data

• Deposit amounts, timestamps, and payment method identifiers (e.g., bKash wallet number, Nagad number, Rocket number, Upay number).
• Withdrawal requests, amounts, and destination payment method identifiers.
• Transaction reference numbers and status records maintained for accounting and dispute resolution purposes.

2.4 Gameplay & Betting Data

• Bet history, game session records, wagering amounts, and outcomes for all sports betting, casino, and crash game activity.
• Bonus and promotion usage records, including wagering progress against applicable requirements.
• Responsible gaming tool settings (deposit limits, session alerts, self-exclusion status) and any changes you make to those settings.

2.5 Technical & Device Data (Collected Automatically)

• IP address and approximate geographic location derived from IP.
• Device type, operating system, browser type and version.
• Pages visited on the tk34 platform, time spent, click paths, and referring URLs.
• Session identifiers and authentication tokens (stored as encrypted cookies).
• Error logs and crash reports generated during platform use.

2.6 Communication Data

• The content of emails, live chat transcripts, and support tickets exchanged between you and the tk34 support team.
• Platform notification read and interaction status.

3 How We Use Your Data

tk34 uses your personal data only for defined, legitimate purposes. The table below maps each category of data we collect to the specific purpose or purposes for which it is used.

tk34 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight. Where automated tools are used to flag suspicious activity or trigger responsible gaming interventions, a human compliance team member reviews the output before any account action is taken.

4 Legal Basis for Processing

tk34 processes your personal data on one or more of the following legal grounds, depending on the nature of the processing activity:

• Performance of a contract: Processing your registration data, KYC documents, and financial transaction data is necessary to deliver the betting and gaming services you have contracted for when creating a tk34 account.
• Compliance with a legal obligation: Identity verification, age verification, record-keeping, and anti-money-laundering checks are carried out in compliance with applicable legal and regulatory obligations.
• Legitimate interests: tk34 processes device data, technical logs, and gameplay analytics to protect the security and integrity of the platform, detect fraud and bonus abuse, and improve service quality. These legitimate interests are balanced against your right to privacy, and we apply proportionate data minimisation practices.
• Consent: Where we send optional marketing communications or non-essential cookies, we do so on the basis of your explicit consent. You may withdraw consent at any time by contacting [email protected] or adjusting your account notification settings.

5 Sharing Your Personal Data

tk34 does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited and controlled circumstances:

5.1 Payment Service Providers

When you make a deposit or withdrawal using bKash, Nagad, Rocket, or Upay, we share the minimum necessary transaction data (including your registered mobile number and transaction amount) with the relevant payment provider to process the transaction. Each payment provider operates under its own privacy policy and security framework.

5.2 Game and Content Providers

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier to facilitate game loading and bet settlement. These providers do not receive your full name, contact details, or financial data unless required for a specific regulatory audit conducted with your knowledge.

5.3 Identity Verification Services

tk34 may engage third-party KYC technology partners to assist with document verification and age confirmation. These partners process identity documents solely for verification purposes and are prohibited by contract from using your data for any other purpose.

5.4 Legal and Regulatory Disclosure

We may disclose personal data to law enforcement agencies, courts, regulatory bodies, or other governmental authorities where we are required to do so by applicable law, court order, or lawful regulatory demand. Where permitted by law, we will notify you of such disclosure.

5.5 Business Continuity

In the event of a merger, acquisition, or transfer of tk34 assets to a successor entity, player data may be transferred as part of that transaction. We will notify active players of any such change and ensure that the successor entity is bound by data protection obligations at least as protective as those in this policy.

6 Cookies & Tracking Technologies

tk34 uses cookies and similar tracking technologies to operate the platform, maintain your session, and analyse usage patterns. The categories of cookies we use are described below:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your authenticated session, remember your account preferences, and enable core security features such as CSRF protection. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: These cookies remember your platform settings and preferences (such as language and notification choices) so that you do not need to re-enter them on each visit.
• Analytics Cookies: tk34 uses privacy-respecting analytics tools to understand how players interact with the platform — including which pages are visited most frequently and where technical errors occur. Analytics data is aggregated and does not identify individual players by name or contact details.
• Security Cookies: Short-lived session tokens and device fingerprint markers used to detect suspicious login attempts and protect your account from unauthorised access.

tk34 does not use advertising cookies, third-party retargeting pixels, or cross-site tracking technologies. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your tk34 account.

7 Data Security

tk34 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, and disclosure. Our key security measures include:

• Encryption in transit: All data transmitted between your device and tk34 servers is encrypted using TLS 1.3 with 256-bit SSL certificates. Connections using outdated TLS versions are rejected.
• Encryption at rest: Sensitive data fields including password hashes, KYC document scans, and financial records are stored in AES-256 encrypted form in our database infrastructure.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Internal staff with access to player data are subject to background checks, data handling training, and contractual confidentiality obligations.
• Infrastructure security: tk34 servers are hosted in data centres with physical security controls, network firewalls, intrusion detection systems, and regular vulnerability assessments.
• Incident response: In the event of a personal data breach that poses a risk to player rights, tk34 will follow a defined incident response protocol including containment, investigation, notification to affected players, and remediation.

8 Data Retention

tk34 retains personal data for defined periods that reflect the purpose for which the data was collected and any applicable legal retention obligations. Our standard retention schedule is as follows:

Once a retention period expires, personal data is securely deleted or anonymised in a way that means it can no longer be linked back to you. Anonymised, aggregated data (such as platform-wide betting statistics) may be retained indefinitely as it no longer constitutes personal data.

9 Your Data Rights

As a player on the tk34 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request" and provide your registered account username and the specific right you wish to exercise. We will acknowledge your request within 48 hours and aim to fulfil it within 30 days.

Please note that certain rights may be limited where tk34 has a legal obligation to retain data (for example, financial records required for anti-money-laundering compliance) or where fulfilling a request would prejudice an ongoing fraud investigation. We will explain any such limitation clearly when responding to your request.

10 Children & Minors

Parents or guardians who believe that a minor may have created a tk34 account using false information are requested to contact [email protected] immediately. tk34 takes underage gambling prevention extremely seriously and maintains robust age verification procedures as part of our KYC process.

11 Third-Party Links

The tk34 platform may contain references to third-party services such as payment providers (bKash, Nagad, Rocket, Upay) and game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). When you interact with these third-party services, you leave the tk34 data environment and their own privacy policies govern the collection and use of your data. tk34 is not responsible for the privacy practices of third-party providers.

We recommend reviewing the privacy policies of any third-party service you interact with in connection with your tk34 account. Links to third-party services are provided solely for your convenience and do not constitute an endorsement of their privacy practices by tk34.

12 Changes to This Privacy Policy

tk34 reserves the right to update or amend this Privacy Policy at any time. When we make material changes — meaning changes that meaningfully affect how we collect, use, or share your personal data — we will take the following steps:

• Update the effective date shown at the top of this document and in the hero section of this page.
• Display a prominent notification on the tk34 platform informing active players of the update when they next log in.
• Where practicable, send a notification to your registered email address summarising the nature of the changes.

Your continued use of the tk34 platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any changes to this policy, you should cease using the platform and may request account closure by contacting the support team.

Minor editorial changes — such as correcting typographical errors, improving clarity without changing meaning, or updating formatting — may be made without individual notification but will still be reflected in an updated effective date.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way tk34 handles your personal data, please contact our support team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

• Email: [email protected] — use subject line "Privacy Enquiry" for fastest routing.
• Live Chat: Available 24/7 directly through the tk34 platform interface.
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6).

For formal data rights requests (access, erasure, portability, etc.), please use the subject line "Data Rights Request" and include your registered account username so our compliance team can locate your records efficiently. We will acknowledge your request within 48 hours and complete it within 30 calendar days, or notify you if additional time is required.