tkx8 Privacy Policy — How Your Personal Data Is Handled

1. Who We Are

1.1 tkx8 operates the online betting and gaming platform accessible at tkx8.io (the "Platform"). For the purposes of this Privacy Policy, tkx8 is the data controller responsible for the personal information collected through the Platform.

1.2 This Privacy Policy applies to all individuals who access or use the Platform in any capacity, including registered account holders, prospective players who browse the Platform without registering, and individuals who contact tkx8 support.

1.3 If you have any questions about this Privacy Policy or about how your data is handled, you may contact us at any time using the details in Section 14.

2. Data We Collect

2.1 tkx8 collects personal data in the following categories:

Category	Examples	Collection Method
Identity Data	Full name, date of birth, National ID number, passport number	Registration form, KYC document upload
Contact Data	Email address, mobile phone number, city of residence	Registration form, account settings
Financial Data	bKash / Nagad / Rocket mobile number, transaction reference numbers	Deposit and withdrawal requests
Technical Data	IP address, browser type and version, device type, operating system, time zone	Automatically via server logs and cookies
Usage Data	Pages visited, games played, bet history, session duration, click patterns	Automatically via Platform analytics
Communications Data	Support chat transcripts, email correspondence, feedback submissions	Direct interaction with support team
Verification Documents	Scanned copies of government-issued ID, proof of address, payment method screenshots	KYC process prior to first withdrawal

2.2 tkx8 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, biometric data, or health information, except where required by law or where you have explicitly provided such information in the context of a responsible gaming self-assessment.

2.3 You are not legally required to provide your personal data to tkx8. However, certain data is necessary for the Platform to function — for example, without identity verification, we cannot process withdrawal requests. Where providing data is optional, we will make this clear at the point of collection.

3. How We Use Your Data

3.1 tkx8 uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your tkx8 account, including verifying your identity and processing your registration.
• Transaction Processing: To process deposits and withdrawal requests via bKash, Nagad, Rocket, Upay, and other supported payment methods.
• Identity Verification (KYC): To fulfil our obligations under applicable anti-money-laundering and know-your-customer requirements.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct.
• Customer Support: To respond to your enquiries, resolve disputes, and improve the quality of our support services.
• Platform Improvement: To analyse usage patterns and technical data in order to improve the performance, features, and user experience of the Platform.
• Legal Compliance: To comply with any applicable legal obligation, regulatory requirement, or court order to which tkx8 is subject.
• Responsible Gaming: To monitor account activity for indicators of problem gambling behaviour and to administer responsible gaming tools such as deposit limits and self-exclusion.
• Communications: To send you service-related notifications, account alerts, and — where you have given explicit consent — promotional communications about offers and bonuses.

3.2 tkx8 does not use your personal data for automated individual decision-making that produces legal or similarly significant effects without human review, except where required by law.

4. Legal Basis for Processing

4.1 For each purpose described in Section 3, tkx8 relies on one or more of the following legal bases for processing your personal data:

• Contractual Necessity: Processing is necessary to perform the contract between you and tkx8 — specifically, to provide the betting and gaming services you have registered to use.
• Legal Obligation: Processing is necessary for tkx8 to comply with applicable anti-money-laundering regulations, identity verification requirements, and other statutory obligations.
• Legitimate Interests: Processing is necessary for tkx8's legitimate business interests, including fraud prevention, Platform security, customer support quality improvement, and responsible gaming monitoring — provided those interests are not overridden by your rights and interests.
• Consent: For non-essential purposes such as promotional email communications, tkx8 processes your data only where you have given explicit, informed, and freely given consent. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting support.

5. Data Sharing and Disclosure

5.1 tkx8 does not sell, rent, or trade your personal data to any third party. We share data only in the following limited and controlled circumstances:

• Payment Processors: We share transaction-relevant data with payment service providers (such as bKash, Nagad, Rocket, and Upay) solely for the purpose of processing your deposit and withdrawal instructions.
• Identity Verification Providers: We may use specialist KYC and identity verification services to assist with document validation. These providers process only the data necessary for verification and are bound by strict confidentiality agreements.
• Game Content Providers: Third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive limited session data necessary to deliver their games within the Platform. These providers operate under their own privacy policies.
• Platform Infrastructure Providers: We use third-party hosting, cloud storage, and security services to operate the Platform. These providers act as data processors under our instructions and may not use your data for their own purposes.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by applicable law, valid legal process, or in connection with the investigation of fraud or other criminal activity.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a material portion of tkx8's assets, personal data held by tkx8 may be transferred to the relevant successor entity. You will be notified of any such transfer in advance.

5.2 All third parties with whom tkx8 shares personal data are required to implement appropriate technical and organisational security measures and to process data only for the specific, documented purposes for which it was shared.

6. Cookies and Tracking Technologies

6.1 The tkx8 Platform uses cookies and similar tracking technologies to support the operation of the Platform, remember your preferences, and analyse usage patterns. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without preventing your use of the Platform.
• Functional Cookies: Remember your preferences such as language settings, selected game categories, and responsible gaming tool configurations. These improve your experience but are not essential to core functionality.
• Analytics Cookies: Collect anonymised or pseudonymised data about how visitors navigate the Platform — including pages visited, session duration, and feature engagement. This data is used exclusively to improve Platform performance and content. No analytics data is linked back to your personal identity without your consent.
• Session Management Cookies: Maintain your logged-in session across pages during an active visit. These expire automatically when you close your browser or after a defined inactivity period.

6.2 You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to log in or use core Platform features. Disabling analytics cookies will not affect your ability to use the Platform.

6.3 tkx8 does not use third-party advertising cookies or cross-site tracking technologies for targeted advertising purposes.

7. Data Security

7.1 tkx8 implements a layered approach to data security, combining technical, procedural, and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction.

7.2 Key security measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Hashed password storage — your credentials are never stored in reversible plain-text format.
• Two-factor authentication (2FA) availability for account holders who wish to use it.
• Role-based access controls ensuring that tkx8 staff can access only the personal data necessary for their specific job function.
• Regular security audits and vulnerability assessments of Platform infrastructure.
• Automatic session expiry after a defined period of inactivity.

7.3 You are responsible for maintaining the security of your own account credentials. tkx8 will never ask for your password through support channels, email, or any other medium. If you suspect that your account has been compromised, contact our support team immediately at [email protected].

7.4 In the event of a confirmed data security breach that is likely to result in a risk to your rights and freedoms, tkx8 will notify affected users without undue delay via the email address registered on their account, and will take immediate remedial action.

8. Data Retention

8.1 tkx8 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations.

8.2 The following standard retention periods apply:

• Account and Identity Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in accordance with anti-money-laundering record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Retained for two (2) years from the date of the last communication in a support thread.
• Technical and Usage Logs: Retained for up to twelve (12) months, after which they are aggregated or deleted.
• KYC Verification Documents: Retained for a minimum of five (5) years following account closure, then securely destroyed.

8.3 Where personal data is no longer required for any lawful purpose, tkx8 will securely delete or anonymise it in a manner that prevents reconstruction.

9. Your Data Rights

9.1 As a data subject, you have the following rights in relation to your personal data held by tkx8:

• Right of Access: You may request a copy of the personal data that tkx8 holds about you, together with information about how it is being used.
• Right to Rectification: You may request that any inaccurate or incomplete personal data is corrected or updated without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal obligation to retain it.
• Right to Restriction: You may request that tkx8 restricts the processing of your personal data in certain circumstances, for example while an accuracy dispute is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that your data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data where tkx8 relies on legitimate interests as its legal basis, unless tkx8 can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

9.2 To exercise any of the rights listed above, please contact tkx8 at [email protected] with the subject line "Data Rights Request". All requests will be acknowledged within two (2) business days and fulfilled within fourteen (14) business days, subject to identity verification.

9.3 tkx8 will not charge a fee for the exercise of data rights in ordinary circumstances. Where requests are manifestly unfounded or excessive, tkx8 reserves the right to charge a reasonable administrative fee or decline to act.

10. Children and Minors

10.1 The tkx8 Platform is strictly intended for adults aged 21 and above. tkx8 does not knowingly collect personal data from individuals under the age of 21.

10.2 If tkx8 discovers or is made aware that an account has been registered by or personal data has been submitted by an individual under the age of 21, all associated data will be deleted promptly and the account will be permanently closed.

10.3 If you have reason to believe that a minor has submitted personal data to tkx8, please contact us immediately at [email protected] so that appropriate action can be taken without delay.

11. International Data Transfers

11.1 The tkx8 Platform primarily serves players in Bangladesh. In the course of operating the Platform, personal data may be processed by service providers whose servers are located outside Bangladesh, including in jurisdictions that may have different data protection standards.

11.2 Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection, tkx8 takes steps to ensure that appropriate safeguards are in place — including contractual obligations on the receiving party to protect the data to a standard equivalent to that described in this Privacy Policy.

11.3 By using the Platform, you acknowledge that your personal data may be transferred and processed in jurisdictions outside Bangladesh for the purposes described in this Privacy Policy.

12. Third-Party Links and Services

12.1 The tkx8 Platform may contain references to third-party game providers whose games are accessible via the Platform. These providers operate independently and are subject to their own privacy policies. tkx8 is not responsible for the data practices of third-party game studios or payment service providers.

12.2 tkx8 recommends that you review the privacy policies of any third-party service you interact with through the Platform, particularly those of your chosen payment provider (such as bKash or Nagad), to understand how they handle your data.

13. Updates to This Privacy Policy

13.1 tkx8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, Platform features, or applicable legal requirements. The effective date at the top of this document will be updated accordingly.

13.2 Where changes are material — meaning they significantly affect your rights or how your data is used — tkx8 will notify registered account holders via email to the address on file, and will display a prominent notice on the Platform for a reasonable period following the update.

13.3 Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. The most current version of this document is always available at tkx8.io/privacy-policy.

14. Contact and Data Rights Requests

For any questions, concerns, or requests related to this Privacy Policy or to the personal data that tkx8 holds about you, please contact our support team using the details below. We aim to acknowledge all privacy-related enquiries within two (2) business days and to resolve them within fourteen (14) business days (Bangladesh Standard Time, UTC+6).

Email: [email protected]

Subject Line for Data Requests: Data Rights Request

Support Hours: 24 hours a day, 7 days a week, 365 days a year — in English.