Privacy Policy — tk99vip

1. Information We Collect

tk99vip collects personal information from you in the course of registering and operating your player account. The categories of personal data we collect are outlined below, along with the context in which each category is gathered.

Registration Data: When you create an account on tk99vip, we collect your full legal name, date of birth, residential address, email address, and mobile phone number. This information is required to create your account, verify your identity, and comply with our legal obligations under applicable anti-money-laundering and age verification frameworks.

Identity Verification (KYC) Data: As part of our Know Your Customer (KYC) process — which is mandatory before your first withdrawal is processed — we may collect copies of government-issued identification documents (such as a National ID card or passport), proof of residential address (such as a utility bill or bank statement), and proof of payment method ownership. All KYC documents are processed securely and retained only for as long as required by law.

Financial Transaction Data: We collect records of all deposits and withdrawals made through your tk99vip account, including the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), transaction amounts, transaction timestamps, and reference numbers provided by payment processors. We do not store full card or mobile wallet credentials on our servers — payment processing is handled by our PCI-compliant payment partners.

Gameplay and Betting Data: We retain a full record of all games played, bets placed, wagers settled, bonuses claimed, and related activity on your account. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud detection purposes.

Device and Technical Data: When you access tk99vip, our systems automatically collect certain technical information including your IP address, browser type and version, device type and operating system, screen resolution, referring URL, session duration, and pages visited. This information is used for security monitoring, fraud detection, and improving platform performance.

Communications Data: If you contact our support team — via live chat, email, or any other channel — we retain records of those communications, including the content of your messages, the date and time of contact, and the resolution outcome. This data is used for quality assurance, training, and dispute resolution purposes.

2. How We Use Your Data

tk99vip uses the personal data we collect for clearly defined purposes. We will never use your data in a manner inconsistent with the purposes described in this Privacy Policy without first obtaining your consent or being required to do so by law.

• Account Operation: To create, maintain, and administer your player account, including processing deposits and withdrawals, awarding bonuses, and providing access to games and betting markets.
• Identity Verification: To verify that you meet our eligibility requirements, including the minimum age of 18 years, and to comply with our legal obligations under applicable anti-money-laundering and counter-terrorism financing regulations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other prohibited activities. Our automated fraud detection systems analyse gameplay patterns, transaction behaviour, and device fingerprints to identify suspicious activity.
• Responsible Gaming: To monitor player activity for signs of problem gambling — such as rapid deposit escalation, extended play sessions, or self-exclusion breaches — and to enforce the responsible gaming tools you activate on your account, including deposit limits, cool-off periods, and self-exclusion.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance with account management. Support interaction records are retained to ensure consistent service quality and accurate dispute resolution.
• Marketing Communications: Where you have opted in to receive promotional communications, we may use your email address and mobile number to send you information about bonuses, promotions, and seasonal offers relevant to Bangladesh players. You may opt out of marketing communications at any time through your account preferences or by contacting support@tk99vip.
• Platform Improvement: To analyse aggregate usage patterns, identify performance issues, and develop improvements to the platform's features, user interface, and game offering. Analytics data used for this purpose is anonymised or pseudonymised wherever possible.
• Legal Compliance: To fulfil our obligations under applicable law, including retaining financial records for the periods required by anti-money-laundering regulations, responding to lawful requests from regulatory or law enforcement authorities, and enforcing our Terms & Conditions.

3. Data Sharing & Third Parties

tk99vip does not sell your personal data to any third party under any circumstances. We may, however, share specific categories of personal data with carefully selected third-party service providers and, where legally required, with regulatory or law enforcement bodies. All third-party data sharing is governed by strict contractual data protection obligations.

Payment Processors: To process your deposits and withdrawals, we share necessary transaction data with our payment partners including bKash, Nagad, Rocket, Upay, and participating Bangladeshi banks. These providers receive only the minimum data required to complete the transaction and are subject to their own regulatory obligations regarding data protection.

Identity Verification Providers: We work with trusted third-party identity verification and KYC service providers to validate the documents you submit during the account verification process. These providers process your KYC data on our behalf under strict data processing agreements and are not permitted to use your data for any other purpose.

Game Software Providers: When you play games on tk99vip powered by third-party studios — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — limited technical data (such as a pseudonymous player session identifier) is shared with the relevant provider to facilitate gameplay. Game providers do not receive your full personal profile.

Fraud Prevention and Security Services: We use specialist third-party fraud detection and cybersecurity services to monitor platform activity for suspicious behaviour. These services may process device fingerprint data, IP addresses, and behavioural patterns to assist in identifying fraudulent activity.

Regulatory and Law Enforcement Disclosure: tk99vip may be required to disclose personal data to regulatory bodies, law enforcement agencies, or courts in response to a lawful request, court order, or legal obligation. We will disclose only the minimum data required by the specific legal request and, where permissible by law, will notify you of any such disclosure.

Business Transfers: In the event of a merger, acquisition, or sale of all or part of tk99vip's business, player personal data may be transferred to the acquiring entity as part of the transaction. In such circumstances, you will be notified of the transfer and the privacy practices of the acquiring entity in advance.

4. Cookies & Tracking Technologies

tk99vip uses cookies and similar client-side storage technologies to maintain your session, remember your preferences, and collect aggregate analytics data about how the platform is used. This section explains the types of cookies we use and how you can manage them.

Essential Cookies: These cookies are strictly necessary for the platform to function. They maintain your login session, store your game preferences, and support security features such as CSRF protection. Without essential cookies, the platform cannot operate correctly. These cookies cannot be disabled without breaking core platform functionality.

Analytics Cookies: We use anonymised analytics tools to understand how players navigate the platform — which pages are visited most frequently, where users encounter errors, and how long sessions typically last. This data is collected in aggregate form and is not linked to individual player identities. It is used solely to improve platform performance and user experience.

Session Cookies: Session cookies are temporary and are deleted automatically when you close your browser. They are used to keep you logged in during your play session and to maintain the state of your account activity within a single visit.

Persistent Cookies: Certain preference cookies persist across sessions — for example, your display language preference (English) or your accepted responsible gaming notification state. These cookies have defined expiry periods, typically ranging from 30 days to 12 months.

Managing Cookies: You can manage or delete cookies at any time through your browser settings. Most modern browsers allow you to block or delete cookies, set preferences for specific sites, or receive a notification before a cookie is placed. Note that disabling essential cookies will prevent you from logging in to your tk99vip account. Analytics and preference cookies can be disabled without affecting core account functionality.

5. Data Security & Storage

tk99vip takes data security seriously and implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

• Encryption in Transit: All data transmitted between your browser or device and tk99vip's servers is encrypted using TLS 1.2 or higher. Our SSL certificate is renewed regularly and monitored for validity.
• Encryption at Rest: Sensitive personal data — including KYC documents, identity records, and financial data — is encrypted at rest using AES-256 encryption on our secure servers.
• Access Controls: Access to personal data within tk99vip's systems is restricted on a strict need-to-know basis. All staff with access to personal data undergo mandatory privacy and security training. Administrative access requires multi-factor authentication and is logged comprehensively.
• Server Security: Our platform infrastructure is hosted on enterprise-grade secure servers with physical access controls, network firewall protection, intrusion detection systems, and regular security vulnerability assessments.
• Payment Security: Payment credentials — including mobile wallet PINs and bank account details — are processed exclusively by our PCI DSS-compliant payment partners. tk99vip does not store raw payment credentials on our own servers.
• Incident Response: In the event of a data security incident that is likely to pose a risk to your rights and freedoms, tk99vip will notify affected players without undue delay and will take all reasonable steps to contain the incident and prevent recurrence.

While we implement robust security measures, no online platform can guarantee absolute security against all possible threats. You play an important role in keeping your account secure by using a strong, unique password, enabling two-factor authentication, and never sharing your credentials with anyone. If you suspect your account has been compromised, contact support@tk99vip immediately.

6. Your Rights as a Player

As a player on tk99vip, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our data team at support@tk99vip with the subject line "Data Rights Request". We will respond within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of all personal data we hold about you. We will provide this in a structured, commonly used format. We may ask you to verify your identity before releasing personal data in response to an access request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain account details directly through your account settings page.
• Right to Erasure: In certain circumstances, you have the right to request that we delete your personal data. Note that this right is subject to our legal obligations — for example, we are required to retain certain financial records for a minimum of 7 years under applicable anti-money-laundering regulations, and these records cannot be erased during that mandatory retention period.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, if you contest the accuracy of the data while we verify it, or if processing is unlawful but you prefer restriction to erasure.
• Right to Data Portability: You have the right to receive the personal data you have provided to us in a structured, commonly used, machine-readable format, and to request that we transmit this data directly to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, in which case we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

7. Data Retention Policy

tk99vip retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The specific retention periods applicable to each data category are set out in the table in Section 1 of this Privacy Policy.

When your account is closed — whether at your request or by tk99vip — your personal data is not deleted immediately. Applicable legal obligations, particularly under anti-money-laundering regulations, require us to retain certain records for a minimum period after account closure. Once mandatory retention periods have elapsed, personal data is securely deleted or irreversibly anonymised.

Data that is no longer required for any legal, operational, or dispute-resolution purpose is disposed of securely using industry-standard data destruction methods. Digital records are overwritten or cryptographically erased; physical documents (where applicable) are shredded under secure destruction protocols.

Analytics and technical data that is collected in aggregate form and is not linked to individual identities is retained for up to 13 months and may be archived in anonymised form for longer-term platform performance analysis. Anonymised data that cannot be linked back to any individual is not subject to the same retention limits as personal data.

8. Updates to This Privacy Policy

tk99vip may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When changes are made, we will update the "Effective Date" at the top of this page and, where changes are material, provide notice to registered players via email or an in-platform notification.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of tk99vip following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms.

If you have questions, concerns, or complaints about this Privacy Policy or about how tk99vip handles your personal data, please contact our support team at support@tk99vip. We are available 24 hours a day, 7 days a week, including all Bangladesh public holidays, and will acknowledge all privacy-related enquiries within 2 business days.