tkboss Privacy Policy

Data We Collect

tkboss collects personal data through several channels: directly from you when you register an account or complete KYC verification, automatically as you interact with our platform, and in limited cases from trusted third-party service providers. The categories of personal data we collect are described below.

1.1 Registration & Identity Data

When you create a tkboss account, we collect the following information:

• Full legal name as it appears on your government-issued identification
• Date of birth (required to verify you are 18 years of age or older)
• Residential address, including district and division within Bangladesh
• Email address (used as your primary account identifier and for communications)
• Mobile phone number (used for account security and transaction notifications)
• Username chosen during registration
• Password (stored only as a salted cryptographic hash — never in plain text)

1.2 KYC Verification Documents

To comply with our Know Your Customer obligations and to protect the integrity of the platform, we collect the following documentary evidence where required:

• Copy of Bangladesh National ID (NID) card or valid passport
• Proof of residential address (utility bill, bank statement, or official government letter dated within 90 days)
• Selfie photograph taken alongside the submitted identity document
• Proof of ownership of payment methods where relevant (e.g., bKash, Nagad, or bank account registered in your name)

1.3 Financial Transaction Data

We record details of all financial transactions conducted on the platform, including deposit amounts, withdrawal requests, transaction timestamps, and the payment channels used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, Mastercard). We do not store full card numbers or mobile banking PINs. Payment authentication is handled by the respective payment service providers under their own security standards.

1.4 Gameplay & Betting Activity Data

We maintain records of all gameplay sessions, wagers placed, games accessed, bet amounts, outcomes, and bonus activity associated with your account. This data is used for account management, dispute resolution, fraud prevention, and to fulfil our regulatory obligations. It is also used in aggregate, anonymised form to improve the platform's game offering.

1.5 Technical & Device Data

When you access tkboss.app, our systems automatically record certain technical information, including your IP address, browser type and version, operating system, device type (mobile, desktop, tablet), screen resolution, referring URL, and pages visited within the platform. This data is collected through server logs and cookies as described in Section 4 of this policy.

1.6 Communications Data

If you contact our support team via live chat, email, or any other channel, we retain records of that correspondence including the content of messages, timestamps, and the outcome of any support interaction. These records are kept for quality assurance, dispute resolution, and staff training purposes.

How We Use Your Data

tkboss processes your personal data on the basis of one or more of the following lawful grounds: (a) performance of the contract between you and tkboss; (b) compliance with legal obligations applicable to our operations; (c) our legitimate interests in operating a secure, fair, and commercially viable platform; and (d) your explicit consent where required.

The specific purposes for which your data is processed are set out in the table below:

tkboss does not use your personal data for any automated decision-making process that produces legal or similarly significant effects on you without providing a mechanism to request human review of that decision. Where automated systems flag an account for review (e.g., during fraud screening), a human compliance officer reviews the case before any consequential action is taken.

Data Sharing & Third Parties

tkboss does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Your personal information is shared only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

3.1 Payment Service Providers

To process your deposits and withdrawals, we share necessary transaction details with our payment partners including bKash, Nagad, Rocket, Upay, and partner banks. These providers operate under their own privacy policies and are bound by contractual obligations to use your data only for the purpose of processing the specific transaction. tkboss does not share your full account profile with payment processors — only the minimum data required to complete the financial transaction.

3.2 Game Software Providers

Our casino game library is powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game, your account identifier and session token are passed to the game provider's system to initiate the game session and record outcomes. Game providers do not receive your full personal profile, KYC documents, or payment information.

3.3 KYC and Identity Verification Partners

We may use accredited third-party identity verification services to assist with the processing and validation of KYC documents. These providers are data processors acting under our instruction and are contractually prohibited from using your data for any purpose other than the specific verification task. All verification data is transmitted over encrypted connections.

3.4 Legal and Regulatory Authorities

tkboss is required by law to disclose personal data to relevant authorities where requested under applicable legal process, including requests related to anti-money laundering investigations, fraud inquiries, or court orders. We will notify you of any such disclosure to the extent we are legally permitted to do so. Our Anti-Money Laundering (AML) obligations may require us to file reports with relevant financial intelligence authorities without notifying the subject of the report.

3.5 Analytics and Platform Optimisation

We use aggregated, anonymised technical data with analytics service providers to understand platform usage patterns, identify technical errors, and improve the user experience. This data does not identify individual users and cannot be used to reconstruct personal profiles.

Cookies & Tracking Technologies

The tkboss platform uses cookies and similar technologies to deliver core platform functionality, maintain your session state, and understand how the platform is being used. The following categories of cookies are in use:

4.1 Strictly Necessary Cookies

These cookies are essential for the platform to function and cannot be disabled. They maintain your authenticated session after login, remember your language and regional preferences, and enable secure communication between your browser and our servers. Without these cookies, core platform features including gameplay, deposits, and account management cannot operate.

4.2 Functional Cookies

Functional cookies remember your preferences — such as previously selected game categories, display settings, and responsible gaming tools you have activated — so that you do not need to reconfigure them on every visit. These cookies do not track your activity across other websites.

4.3 Analytics Cookies

We use analytics cookies to collect aggregated, anonymised information about how players interact with the tkboss platform. This helps us identify which features are most used, where technical issues arise, and how the overall player journey can be improved. Analytics data is processed at an aggregate level and does not link back to individual account holders.

4.4 Managing Cookies

You can control cookie settings through your web browser. Most browsers allow you to refuse non-essential cookies or delete stored cookies at any time. Please note that disabling strictly necessary cookies will impair or prevent your ability to use the tkboss platform. Instructions for managing cookies in major browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation.

Data Retention & Storage

tkboss retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data and KYC documents: Retained for a minimum of 5 years from the date of account closure. This is required by our Anti-Money Laundering compliance obligations.
• Financial transaction records: Retained for a minimum of 7 years from the date of each transaction, in line with standard financial record-keeping requirements.
• Gameplay and betting activity logs: Retained for 5 years from the date of each session. These records may be needed for dispute resolution and audit purposes.
• Customer support communications: Retained for 3 years from the date of the last interaction, unless the correspondence is linked to a formal dispute or legal matter.
• Technical and device logs: Typically retained for 12 months, after which they are aggregated and anonymised or deleted.
• Marketing preference records: Retained for as long as your account remains active, or until you withdraw consent for marketing communications.

When retention periods expire and no legal obligation requires continued storage, data is securely deleted or irreversibly anonymised. KYC documents are deleted from active storage systems and purged from backups within 30 days of the applicable retention period ending.

Your Privacy Rights

As a player on the tkboss platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request" and a description of the specific right you wish to exercise. We will respond in writing within 30 days of receiving your request.

6.1 Right of Access

You have the right to request a copy of all personal data we hold about you. We will provide this in a clear, structured format. We may ask you to verify your identity before releasing account data to protect against unauthorised access requests.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update certain details — such as your email address and phone number — directly through your account profile. For corrections to identity documents or date of birth, you must contact the support team and provide supporting documentation.

6.3 Right to Erasure

You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis for processing exists. Please note that we are unable to delete data that we are legally required to retain, such as financial transaction records and KYC documentation within applicable retention periods.

6.4 Right to Restrict Processing

You may request that we limit how we use your personal data in certain circumstances — for example, while a data accuracy dispute is being resolved. During any restriction period, we will continue to store your data but will not actively process it beyond the restricted scope.

6.5 Right to Withdraw Marketing Consent

If you have previously consented to receiving promotional emails, bonus notifications, or seasonal offers from tkboss, you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal, and does not affect our ability to send you service-related communications (e.g., account security alerts, transaction confirmations).

6.6 Right to Lodge a Complaint

If you believe that your personal data has been processed in a manner inconsistent with this Privacy Policy or applicable law, you have the right to lodge a complaint. We ask that you contact us first so we can attempt to resolve your concern directly. You may also contact the relevant data protection authority in your jurisdiction.

Data Security Measures

tkboss takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures designed to prevent unauthorised access, disclosure, alteration, or destruction of player information.

7.1 Encryption

All data transmitted between your device and the tkboss platform is protected by TLS 1.3 encryption, the current industry standard for secure web communications. Data stored on our servers — including KYC documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption. Passwords are never stored in plain text; they are stored as salted bcrypt hashes.

7.2 Access Control

Access to systems containing personal data is restricted to authorised tkboss personnel on a need-to-know basis. All staff with access to personal data undergo background screening and receive data protection training. Access is governed by role-based permissions and is logged for audit purposes. Access to KYC documents is further restricted to our verified compliance team only.

7.3 Infrastructure Security

The tkboss platform infrastructure is hosted in data centres with physical security controls, environmental protections, and redundant systems. We conduct regular vulnerability assessments and penetration testing to identify and remediate security weaknesses. Critical security patches are applied on an expedited basis.

7.4 Incident Response

In the event of a personal data breach that is likely to result in risk to affected individuals, tkboss will notify the impacted players without undue delay and will take immediate steps to contain and remediate the breach. We maintain a documented incident response procedure that is reviewed and updated annually.

Changes to This Policy

tkboss reviews this Privacy Policy periodically and will update it to reflect changes in our data practices, applicable law, or platform features. The date of the most recent revision is always displayed at the top of this document and in the metadata bar below the hero section.

When we make material changes to this Privacy Policy — meaning changes that affect how your data is collected, used, or shared in a way that is meaningfully different from what was previously stated — we will notify you via the email address registered to your account prior to the changes taking effect. The notification will summarise the key changes and provide a link to the updated policy.

For minor or administrative changes (such as clarifications of existing practices, corrections of typographical errors, or formatting updates that do not alter the substance of the policy), we may update this page without individual notification. Your continued use of the tkboss platform after a revised Privacy Policy has been published constitutes your acknowledgement of the updated terms.

If you have questions about any aspect of this Privacy Policy, or wish to exercise any of your privacy rights as described in Section 6, please contact our support team at [email protected]. We are committed to responding to all privacy-related enquiries promptly and transparently.