Privacy Policy — How tk339 Collects, Uses, and Protects Your Data

This Privacy Policy ("Policy") is issued by tk339 ("tk339", "We", "Us", "Our"), the operator of the online casino and sports betting platform accessible at https://tk339.io ("the Platform"). This Policy applies to all individuals who access or use the Platform, including unregistered visitors, registered members, and active depositing players.

tk339 is committed to handling all personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy describes in detail the categories of personal data we collect, the purposes for which that data is processed, the legal bases on which we rely, the parties with whom we may share data, the security measures we employ, the retention periods we observe, and the rights available to you as a data subject.

This Privacy Policy forms an integral part of the tk339 Terms & Conditions. By using the tk339 Platform, you consent to the data practices described in this Policy. Where we rely on your consent as the legal basis for processing, you may withdraw that consent at any time by contacting us at [email protected], subject to the limitations set out in Section 10 below.

This Policy was last reviewed and updated on 1 January 2026. The most current version of this Policy will always be available at https://tk339.io/privacy-policy. We encourage you to review this page periodically to remain informed of any changes.

tk339 collects personal data that falls into the following categories. We collect only the data that is necessary for the specified purpose and do not retain data beyond the periods described in Section 8 of this Policy.

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is contained in identity verification documents submitted for age and identity verification purposes.

tk339 collects personal data through the following methods:

• Direct Submission: Data you provide voluntarily when creating an account, completing identity verification, making a deposit or withdrawal, contacting our support team, or participating in promotions.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP addresses, device identifiers, browser characteristics, and session activity logs. This data is gathered using server-side logging and first-party cookies.
• Payment Processing Partners: When you initiate a financial transaction via bKash, Nagad, Rocket, or Upay, our payment processing partners may share transaction confirmation data with tk339 to facilitate the crediting of your account.
• Identity Verification Partners: If tk339 uses a third-party identity verification service to validate your KYC documents, that provider may share a verification result and document status with us. The underlying document imagery is processed in accordance with that provider's own data handling procedures.
• Fraud Prevention Systems: tk339 uses automated fraud detection tools that analyse behavioural signals, device fingerprints, and account activity patterns to identify potential policy violations, multi-accounting, and suspicious financial activity.

tk339 processes your personal data for the following specific and lawful purposes:

• Account Creation and Management: To register your account, verify your identity, maintain accurate account records, and enable you to access all Platform features.
• Transaction Processing: To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, and Upay, and to maintain an accurate record of all financial activity on your account.
• Identity and Age Verification (KYC): To verify that you meet the minimum age requirement of 21 years and to confirm your identity in accordance with anti-money laundering obligations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, unauthorised account access, money laundering, and other policy violations or illegal conduct.
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling, to administer self-exclusion and deposit limit requests, and to ensure compliance with our responsible gaming obligations.
• Customer Support: To respond to your queries, complaints, and support requests, and to maintain a record of those communications for quality assurance and dispute resolution purposes.
• Legal and Regulatory Compliance: To comply with applicable legal, regulatory, and reporting obligations, including anti-money laundering (AML) requirements and responses to lawful requests from competent authorities.
• Platform Improvement: To analyse aggregate, anonymised usage data in order to improve the performance, usability, and game offering of the tk339 Platform.
• Promotional Communications: With your explicit prior consent, to send you information about tk339 promotions, bonus offers, seasonal campaigns (such as those tied to BPL, IPL, Eid, or Pohela Boishakh), and other Platform news. You may withdraw consent for marketing communications at any time by contacting [email protected].

tk339 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you, except in the context of fraud detection systems where an automated alert may trigger a manual review of your account.

tk339 processes personal data on the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and tk339 — specifically, the account registration, identity verification, financial transaction processing, and customer support activities described in Section 4. Without this processing, we cannot provide the tk339 service to you.
• Legal Obligation: Processing that is required for tk339 to comply with applicable legal obligations, including anti-money laundering record-keeping requirements and responses to lawful requests from competent authorities.
• Legitimate Interests: Processing that is necessary for the purposes of tk339's legitimate business interests, including fraud prevention, security monitoring, Platform analytics, and responsible gaming oversight, provided that those interests are not overridden by your rights and interests.
• Consent: Processing of your data for direct marketing communications, where required. You may withdraw this consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.

tk339 does not sell your personal data to any third party. We share personal data only in the following strictly limited circumstances:

• Payment Processing Partners: bKash, Nagad, Rocket, and Upay receive the transaction-specific data necessary to process your deposit or withdrawal. These partners operate under their own privacy policies and data protection obligations and do not receive your full account profile.
• Identity Verification Providers: Third-party KYC providers may receive copies of identity documents submitted by you for the sole purpose of performing age and identity verification. These providers are bound by strict confidentiality and data handling agreements with tk339.
• Technology and Infrastructure Providers: tk339 works with hosting, cloud infrastructure, and platform technology providers who may process data on our behalf as data processors. All such providers are bound by data processing agreements that restrict their use of your data to the instructions of tk339.
• Game Content Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, and Spribe may receive a pseudonymised player session identifier to facilitate in-game functionality. These providers do not receive your full identity or financial data.
• Legal and Regulatory Authorities: tk339 will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law or by a valid legal order. We will, where legally permissible, notify you of any such disclosure.

tk339 uses cookies and similar browser-based storage technologies on the Platform for the following purposes:

tk339 does not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. You may manage or disable non-essential cookies through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the Platform.

tk339 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account relationship with tk339, plus a minimum of five (5) years following account closure, in order to satisfy anti-money laundering record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of submission, or for as long as required by applicable law, whichever is longer.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in line with standard financial record-keeping obligations.
• Customer Support Communications: Retained for three (3) years from the date of each communication, unless the communication relates to an unresolved dispute or legal proceeding, in which case it will be retained until that matter is fully resolved.
• Technical and Session Logs: Retained for up to ninety (90) days for security monitoring purposes and then deleted or anonymised.
• Marketing Consent Records: Retained for as long as your consent is active and for three (3) years following withdrawal of consent, to demonstrate compliance.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked back to you as an individual.

tk339 takes the security of your personal data extremely seriously and has implemented a range of technical and organisational security measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the tk339 Platform is protected using industry-standard SSL/TLS encryption. Our platform operates exclusively over HTTPS.
• Encryption at Rest: Sensitive personal data, including identity document copies and financial records, is stored using encryption at rest on secured servers.
• Access Controls: Access to personal data within tk339 is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational requirement may access player data, and all such access is logged and audited.
• Password Security: Account passwords are stored using strong one-way cryptographic hashing functions. tk339 staff cannot retrieve your password in plain text and will never ask you for it.
• Fraud Monitoring: Real-time automated systems monitor the Platform for suspicious login attempts, unusual account activity, and other indicators of unauthorised access or fraudulent behaviour.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, tk339 has an incident response procedure that includes prompt notification to affected individuals and, where required, to competent authorities.

As a data subject, you hold the following rights with respect to the personal data that tk339 holds about you. To exercise any of these rights, contact our support team at [email protected] with a clear description of your request. We will respond within thirty (30) calendar days.

• Right of Access: You have the right to request confirmation of whether tk339 holds personal data about you and, if so, to receive a copy of that data together with an explanation of how it is being used.
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data that we hold about you. Please note that corrections to identity data may require re-submission of verification documents.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing was unlawful. This right is subject to overriding legal retention obligations — for example, tk339 is required to retain financial transaction records for a minimum of five years regardless of an erasure request.
• Right to Restriction of Processing: You may request that tk339 restrict the processing of your data in certain circumstances, such as while the accuracy of the data is being contested or while an objection to processing is being evaluated.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing that is based on tk339's legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

The tk339 Platform is strictly intended for adults aged 21 years and above. tk339 does not knowingly collect personal data from individuals under the age of 21. The collection of data from minors is not permitted under any circumstances.

If tk339 discovers, through age verification processes or any other means, that personal data has been collected from an individual under the age of 21, that data will be permanently deleted, the associated account will be closed immediately, and any funds held in that account will be handled in accordance with applicable legal requirements.

If you believe that tk339 may have inadvertently collected personal data from a person under the age of 21, please notify us immediately at [email protected] so that we can take prompt corrective action.

tk339 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, operational practices, or the scope of the tk339 service. When material changes are made, we will notify registered players by displaying a prominent notice on the Platform and, where practicable, by sending an email notification to the address associated with your account.

The updated Policy will take effect on the date stated in the update notice. Your continued use of the tk339 Platform after the effective date of any revision constitutes your acknowledgement of the updated Policy. The "Last Reviewed" date at the top of this page will be updated with each revision.

If you do not accept the revised terms of this Privacy Policy, you should stop using the Platform and may request account closure by contacting [email protected]. We will process any outstanding withdrawal balances prior to closing your account.

If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of the data rights described in Section 10, please contact the tk339 data support team using the following details:

When submitting a data rights request, please include your full registered name, the email address associated with your tk339 account, and a clear description of the right you wish to exercise or the concern you wish to raise. This will allow us to locate your records and process your request as efficiently as possible.

tk339 is committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with the outcome of your request or the manner in which your concern was handled, you retain the right to escalate the matter to an appropriate supervisory authority.