tk4 Privacy Policy – How We Handle Your Personal Data

Introduction

tk4 ("we", "us", or "the Platform") is committed to protecting the privacy and personal data of all players who register and use the tk4 platform at tk4.asia. This Privacy Policy sets out in plain terms what personal information we collect, the purposes for which we collect and process it, the legal bases on which we rely, and the rights available to you as a data subject. This Policy applies to all users of the tk4 website, regardless of the device used to access the platform (mobile phone, tablet, or desktop browser).

By registering an account on tk4, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not register an account or use the platform. This Privacy Policy should be read alongside the tk4 Terms and Conditions, which govern your use of the platform more broadly.

1. Personal Data We Collect

tk4 collects personal data in several ways: directly from you when you register, deposit, or contact support; automatically through your use of the platform; and from third-party payment processors and identity verification partners where required. The categories of personal data we collect are set out below.

tk4 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data, or health information, except where age verification documents incidentally contain such information. Any such incidental data is not stored or processed beyond what is necessary to complete the verification check.

2. How We Use Your Personal Data

tk4 uses the personal data we collect for the following purposes, each supported by a lawful basis described in Section 3 of this Policy:

• Account creation and management: to register your account, verify your identity and age, maintain your account profile, and enable you to log in securely from your Bangladesh mobile device.
• Payment processing: to process deposits from and withdrawals to your bKash, Nagad, Rocket, Upay, Visa, or Mastercard account; to maintain transaction records; and to investigate and resolve payment disputes.
• Compliance and fraud prevention: to conduct KYC and age verification checks; to detect and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct; to comply with applicable laws and cooperate with competent authorities where required.
• Customer support: to respond to your support queries, resolve account issues, investigate complaints, and maintain records of support interactions for quality assurance and training purposes.
• Platform improvement: to analyse aggregated and anonymised usage data to understand how players interact with the platform, identify areas for improvement, test new features, and optimise the mobile experience for Bangladesh network conditions.
• Responsible Gaming: to monitor betting patterns and account activity for indicators of problem gambling behaviour; to enforce deposit limits, self-exclusion periods, and cooling-off restrictions set by the player; and to fulfil our obligations under applicable responsible gaming standards.

Where we process your personal data for purposes not described above, we will notify you at the time of collection and, where required by applicable law, obtain your consent before proceeding.

3. Legal Basis for Processing

tk4 processes your personal data on the following legal bases:

• Contractual necessity: processing that is necessary to perform the contract between you and tk4 — specifically, to operate your account, accept your deposits and bets, pay out winnings, and provide customer support. Without this processing, tk4 cannot provide its services to you.
• Legal obligation: processing that is necessary for tk4 to comply with applicable laws and regulations, including age verification requirements, anti-money laundering obligations, and mandatory record-keeping requirements.
• Legitimate interests: processing carried out in tk4's legitimate interests, including fraud detection and prevention, platform security, abuse monitoring, and internal analytics — provided those interests are not overridden by your rights and interests as a data subject.
• Consent: where we rely on your consent as a legal basis (for example, for optional marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Data Sharing and Third Parties

tk4 does not sell your personal data. We share personal data only with the following categories of third parties, and only to the extent necessary for the purpose described:

• Payment processors and mobile financial service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard and their respective processing partners): to execute deposit and withdrawal transactions. These providers receive only the data necessary to complete the specific transaction and are bound by their own privacy policies and financial regulatory obligations.
• Identity verification and KYC service providers: to conduct age verification and Know Your Customer checks where required. These providers are contracted to process identity data only for the stated verification purpose and are prohibited from using the data for any other purpose.
• Game content providers (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming, PG Soft, and others): to deliver game content within the platform. These providers may receive a session token and game activity data necessary to render the game and record results. They do not receive your full identity or payment data.
• Law enforcement and regulatory authorities: where tk4 is legally required to disclose personal data by court order, applicable law, or direction from a competent authority. In such cases tk4 will disclose only the minimum data required to satisfy the legal obligation and will, where legally permissible, notify the affected player.

5. Payment Data and Financial Information

Payment transactions on tk4 are processed through the payment providers listed in Section 4. tk4 does not store full card numbers or full mobile wallet credentials on its own servers. Card transactions are handled using tokenisation technology provided by the relevant card processor, which means tk4 receives and stores only a masked card reference (e.g. last four digits and card type) rather than the full card number. Mobile wallet transactions (bKash, Nagad, Rocket, Upay) are processed through the respective MFS provider's API; tk4 retains the wallet number and transaction reference for record-keeping and withdrawal processing purposes only.

All financial data is transmitted using 256-bit SSL encryption. tk4 maintains transaction logs for a minimum of five years from the date of each transaction, in compliance with applicable financial record-keeping requirements. These logs are used for dispute resolution, audit, and regulatory purposes only and are not accessible to unauthorised personnel.

6. Cookies and Tracking Technologies

tk4 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and collect analytics data. The following types of cookies are used on the tk4 website:

• Strictly necessary cookies: required for the platform to function. These include session authentication cookies that keep you logged in, security tokens, and cookies that remember your language preference. These cannot be disabled without breaking core platform functionality.
• Functional cookies: used to remember choices you have made on the platform, such as game display preferences, notification settings, and responsible gaming tool configurations. Disabling these cookies will not prevent you from using the platform but may reset your saved preferences on each visit.
• Analytics cookies: used to collect aggregated and anonymised data about how players use the platform — pages visited, features accessed, session length, and error rates. This data helps tk4 improve the platform experience. Analytics data is not linked to your individual account profile.
• Security and fraud detection cookies: used to identify unusual patterns of platform access that may indicate automated activity, credential stuffing, or other security threats. These cookies are strictly necessary for platform security and cannot be disabled.

You can manage cookie preferences through your mobile browser settings. Note that disabling strictly necessary or security cookies may impair your ability to log in or use the platform normally. tk4 does not currently respond to Do Not Track signals, as there is no consistent industry standard for such signals.

7. Data Retention

tk4 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention period required by applicable law. The following retention periods apply as a general guide: account profile data is retained for the duration of the active account relationship and for a minimum of five years following account closure; transaction and financial records are retained for a minimum of five years from the date of each transaction; KYC and age verification documents are retained for a minimum of five years from account closure or from the date the document was submitted, whichever is later; customer support correspondence is retained for three years from the date of the interaction.

When personal data is no longer required and no legal retention obligation applies, tk4 will securely delete or anonymise it so that it can no longer be associated with any individual. Anonymised analytics data (which cannot be re-linked to any individual) may be retained indefinitely for platform improvement purposes.

8. Data Security

tk4 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include: 256-bit SSL/TLS encryption for all data transmitted between your device and the tk4 servers; encryption at rest for sensitive data fields stored in our databases; access controls that restrict internal access to personal data on a strict need-to-know basis; regular security assessments and penetration testing of the platform infrastructure; and staff training on data protection obligations and secure data handling practices.

While tk4 takes all reasonable precautions to protect your personal data, no data transmission over the internet or mobile network can be guaranteed to be completely secure. If you suspect that your account has been compromised or that your personal data has been accessed without authorisation, you must contact tk4 support immediately. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, tk4 will notify affected players without undue delay.

9. Your Rights Over Your Personal Data

As a player whose personal data is processed by tk4, you have the following rights. To exercise any of these rights, contact tk4 support through the live chat function on the platform or by email at [email protected]. tk4 will respond to verified rights requests within 30 days, or within such shorter period as may be required by applicable law.

• 👁️ Right of Access — You may request a copy of the personal data tk4 holds about you, along with information about how it is being processed.
• ✏️ Right to Rectification — You may request that inaccurate or incomplete personal data tk4 holds about you be corrected or completed without undue delay.
• 🗑️ Right to Erasure — You may request that tk4 delete your personal data where it is no longer necessary for the purposes it was collected, where you withdraw consent and no other legal basis applies, or where you have objected to processing and there are no overriding legitimate grounds. This right does not apply where retention is required by law or for the establishment, exercise, or defence of legal claims.
• 🚫 Right to Restrict Processing — You may request that tk4 restrict the processing of your personal data in certain circumstances, such as while the accuracy of your data is being contested or while an objection to legitimate-interest processing is being assessed.
• 📦 Right to Data Portability — Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that tk4 provide your personal data in a structured, commonly used, and machine-readable format, or transmit it directly to another controller where technically feasible.
• ↩️ Right to Object — You may object at any time to the processing of your personal data where that processing is based on tk4's legitimate interests. tk4 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defence of legal claims.

To exercise any of the rights above, please contact tk4 support via live chat on the platform or by email at [email protected] (displayed as plain text — not a clickable link). tk4 will verify your identity before processing any rights request to ensure that personal data is not disclosed or altered in response to an unauthorised request.

10. Children and Underage Players

tk4 is strictly an adults-only platform. No person under the age of 21 is permitted to register an account or use the platform under any circumstances. tk4 does not knowingly collect personal data from persons under the age of 21. If tk4 becomes aware that personal data has been collected from an underage individual, that data will be permanently deleted and the account closed immediately. If you are a parent or guardian and believe that a minor in your care has registered an account on tk4, please contact support immediately via live chat so that we can investigate and take appropriate action without delay.

11. Marketing Communications

tk4 may send you promotional messages about bonuses, seasonal offers (such as Eid promotions, BPL betting offers, and Pohela Boishakh specials), new game launches, and platform updates by SMS or push notification to your registered Bangladesh mobile number, where you have opted in to receive such communications or where we have a legitimate interest in sending them to existing players.

You may opt out of marketing communications at any time by updating your notification preferences in the account settings section of the platform dashboard, or by contacting tk4 support and requesting removal from the marketing list. Opting out of marketing communications does not affect the sending of transactional messages (such as deposit confirmations, withdrawal notifications, or account security alerts) which are sent as part of the platform service.

12. International Data Transfers

tk4's primary servers are located in data centres that maintain international information security standards. Some of the third-party service providers described in Section 4 (including game content providers and identity verification partners) may process data outside Bangladesh. Where such transfers occur, tk4 ensures that appropriate safeguards are in place, such as contractual data processing agreements that impose data protection obligations equivalent to those described in this Policy, so that your personal data receives an adequate level of protection regardless of where it is processed.

13. Changes to This Privacy Policy

tk4 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or platform functionality. When material changes are made, tk4 will publish the revised Policy on this page with an updated effective date and, where the changes are significant, notify active players by SMS or platform notification. The date at the top of this page indicates when the Policy was last updated.

Your continued use of the tk4 platform following the publication of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you should stop using the platform and may request account closure by contacting tk4 support.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how tk4 handles your personal data, please contact the tk4 data support team. The fastest way to reach us is through the live chat function available 24/7 on the platform website. For written correspondence, you may contact us by email.

Data enquiry email: [email protected] (plain text only — not a clickable link). We aim to respond to all data-related enquiries within one business day during Bangladesh Standard Time (BST, UTC+6) working hours. Complaints about tk4's data handling practices that cannot be resolved through support may be escalated in accordance with applicable data protection laws.