tk399 Privacy Policy
Last updated: November 2026 · Applies to all tk399 accounts in Bangladesh
This Privacy Policy explains how tk399 collects, uses, stores, and protects the personal information of players who use our website at tk399.fun and the tk399 mobile app. By creating an account or continuing to use our services, you agree to the practices described here. If you have any questions after reading this document, our 24/7 live chat team can help.
What Information We Collect
tk399 collects only the data we genuinely need to run a safe and fair gaming platform. We group this data into two categories: information you give us directly, and information generated automatically when you use our services.
Information you provide
- Account details: full name, date of birth, mobile number, and a secure password when you register.
- Identity documents (KYC): a copy of your National ID Card (NID), Passport, or Driving Licence. These are required before your first withdrawal.
- Payment data: your bKash, Nagad, Rocket, or Upay mobile number and transaction reference numbers. We do not store full wallet credentials on our servers.
- Support messages: content of live-chat conversations and any files you share with our support team.
Information collected automatically
- Device and browser data: IP address, browser type, operating system version, screen resolution, and language settings.
- Usage data: pages visited, games opened, session duration, bets placed, and feature interactions.
- Cookie and tracking data: session tokens, preference cookies, and analytics identifiers (see Section 5 for details).
- Location data: country-level location derived from your IP address, used only to apply local compliance rules.
How tk399 Uses Your Information
Every piece of data we collect has a specific purpose. The table below summarises the main uses so you can see at a glance why each data type is needed.
| Purpose | Data Used | Example |
|---|---|---|
| Account creation & login | Name, mobile number, password | Verifying your identity when you log in to tk399 |
| Processing deposits & withdrawals | Payment method, transaction ID | Routing a ৳300 bKash deposit to your account within 5 minutes |
| Identity verification (KYC) | NID / Passport / Driving Licence | Completing your first-time withdrawal review within 2 hours |
| Fraud prevention & security | IP address, device fingerprint, login history | Flagging unusual login attempts from a new device |
| Responsible gaming checks | Betting history, session data | Alerting players who reach their self-set deposit limit |
| Customer support | Support chat logs, account history | Resolving a withdrawal query via 24/7 live chat |
| Personalisation & promotions | Game preferences, play history | Highlighting games similar to those you already enjoy |
| Platform analytics | Usage data, device data | Improving the tk399 app experience on Android 7.0 and above |
We do not sell your personal data to third parties for their marketing purposes, full stop.
Why Are We Allowed to Process Your Data?
tk399 processes your personal data under the following grounds:
- Contract performance: we need certain data to provide the services you signed up for — running your account, paying out winnings, and offering support.
- Legal obligation: anti-money-laundering rules and responsible-gaming regulations require us to verify identities and monitor transactions.
- Legitimate interests: fraud prevention, platform security, and service improvement — provided these do not override your fundamental rights.
- Consent: for optional marketing messages (bonus alerts, new game announcements). You can withdraw consent at any time through your account settings.
Who Else Sees Your Data?
tk399 shares your data only when necessary, and only with trusted parties who are contractually required to protect it.
Payment processors
When you deposit or withdraw via bKash, Nagad, Rocket, or Upay, the relevant payment gateway receives only the transaction data needed to complete the transfer. tk399 does not receive or store your full wallet PIN.
Game providers
Providers such as Pragmatic Play, PG Soft, CQ9, JILI, and Red Tiger receive a pseudonymous player identifier and bet data to run their games. They do not receive your real name or payment details.
Compliance and legal authorities
If required by law or court order, tk399 may disclose account data to relevant authorities. We will notify you where legally permitted to do so.
Analytics and security vendors
We use third-party tools for fraud detection and site analytics. These vendors process data strictly on our behalf under data-processing agreements.
tk399 never sells, rents, or trades your personal information to advertisers or data brokers.
Cookies and Similar Technologies
tk399 uses cookies and similar browser-storage mechanisms to keep the platform working smoothly. Here is what each type does:
| Cookie Type | Purpose | Can You Disable It? |
|---|---|---|
| Essential / session | Keeps you logged in, maintains your cart and game session state | No — the site will not function without these |
| Preference | Remembers language, odds format, and display settings | Yes — but settings will reset each visit |
| Analytics | Counts page views and measures feature usage (no personal identifiers exported) | Yes — via your browser cookie settings |
| Security / fraud | Detects unusual activity patterns and bot traffic | No — required for account safety |
| Affiliate tracking | Records the referral link you used to arrive at tk399 (expires after 30 days) | Yes — via your browser settings |
To manage cookies, go to your browser's privacy or settings menu. Note that disabling analytics cookies does not affect your ability to place bets or withdraw funds.
How Long Do We Keep Your Data?
tk399 retains personal data only as long as there is a valid reason to do so. The schedule below outlines our standard retention periods.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & KYC records | 5 years after account closure | Anti-money-laundering compliance |
| Transaction history | 5 years from transaction date | Financial audit requirements |
| Support chat logs | 2 years from conversation date | Dispute resolution |
| Marketing consent records | Until consent is withdrawn + 1 year | Proof of consent for compliance |
| Server and access logs | 90 days | Security monitoring |
| Analytics data (aggregated) | 24 months rolling | Platform improvement |
When the retention period ends, data is permanently deleted or irreversibly anonymised.
Your Rights as a tk399 Player
You have several rights over the personal data tk399 holds about you. To exercise any of these rights, contact our support team via 24/7 live chat. We will respond within 30 days.
- Access: request a copy of the personal data we hold on your account.
- Correction: ask us to fix inaccurate or outdated information (such as a changed mobile number).
- Deletion: request that we erase your data where there is no longer a legal reason to keep it.
- Restriction: ask us to pause processing your data while a dispute is resolved.
- Portability: receive a machine-readable copy of your account data to transfer elsewhere.
- Objection: opt out of data processing carried out under our legitimate interests (such as personalised game recommendations).
- Withdraw consent: cancel any marketing subscription at any time through your account notification settings.
Some requests — such as full deletion — may not be possible if we are legally required to retain certain records (for example, KYC documents for 5 years under AML rules). We will explain clearly if that applies to your request.
How We Keep Your Data Safe
tk399 applies multiple layers of technical and operational security to protect your information.
- TLS encryption: all data transmitted between your device and tk399 servers is encrypted using TLS 1.2 or higher. The padlock icon in your browser confirms this connection is active.
- Password hashing: your password is never stored in plain text. We use industry-standard cryptographic hashing so that even if our database were compromised, your password remains protected.
- Two-factor verification: you can enable an additional verification step for logins and withdrawals in your account security settings.
- Access controls: only authorised tk399 staff with a specific job need can access personal data, and all access is logged and audited.
- Fraud monitoring: our systems continuously scan for unusual account behaviour such as rapid location changes or atypical withdrawal patterns.
No system can guarantee zero risk. If you notice any suspicious activity on your tk399 account, contact live chat immediately so we can lock and investigate.
Players Under 18
tk399 is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account using false information, please inform our support team right away. We will close the account and delete all associated data without delay.
Age verification is part of our standard KYC process. Any account that cannot confirm the holder is 18 or older will be suspended until valid identity documents are submitted.
When This Policy Changes
tk399 may update this Privacy Policy from time to time — for example, to reflect new features, changes in law, or guidance from regulators. When we do:
- We update the "Last updated" date at the top of this page.
- For significant changes that affect how we use your data in a material way, we will notify you via your registered mobile number or via an in-platform message before the change takes effect.
- Continuing to use tk399 after the effective date of any update means you accept the revised policy.
We encourage you to check this page periodically, especially before making large transactions.
How to Reach Our Privacy Team
If you have a question, complaint, or request about how tk399 handles your personal data, our dedicated privacy support staff are ready to help through 24/7 live chat on the tk399 website and app. This is the fastest way to get a response — most privacy queries are resolved within 2 hours.
When contacting us about a data request, please have the following ready:
- Your registered mobile number or tk399 account username.
- A brief description of your request or concern.
- For identity-sensitive requests, we may ask you to confirm your identity through the same KYC process used for withdrawals.
We aim to respond to all data-rights requests within 30 days. Complex requests may take longer, and we will keep you informed of progress.