tk877 Privacy Policy — How We Handle Your Data

Section 1

Introduction and Scope

Last updated: 1 January 2026

This Privacy Policy ("Policy") sets out how tk877 ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects personal information relating to individuals ("you", "your", "Member", "User") who access or use the tk877 platform at https://tk877.ws, including its associated services, features, and content. By registering an account or using the platform in any way, you confirm that you have read and understood this Policy and that you consent to the processing of your personal data as described herein.

This Policy applies to all personal data we process, whether collected directly from you (e.g. registration forms, identity documents submitted for KYC verification, payment details) or indirectly through your use of the platform (e.g. technical data, device information, gameplay logs). This Policy should be read alongside our Terms and Conditions and our Responsible Gaming policy.

Section 2

Information We Collect

tk877 collects personal information only to the extent necessary to provide its services safely, fairly, and in compliance with applicable legal obligations. The categories of personal data we collect include:

• Identity data: full legal name, date of birth, gender, and nationality as provided during registration and KYC verification. We may also collect a copy of a government-issued photo identification document (national ID, passport, or driving licence) to verify your age and identity.
• Contact data: email address, mobile phone number, and residential address. These are used to communicate account information, process transactions, verify identity, and provide customer support.
• Financial data: deposit and withdrawal transaction records, payment method identifiers (e.g. the bKash or Nagad mobile number used), transaction amounts and timestamps, and account balance history. Full payment card numbers and full bank account details are never stored directly by tk877.
• Technical and usage data: IP address, browser type and version, operating system, device model, screen resolution, session duration, pages visited within the platform, clickstream data, game history, betting history, and login timestamps. This data is collected automatically via server logs and first-party analytics tools.
• Communications data: records of any correspondence between you and tk877, including customer support tickets, live chat transcripts, email exchanges, and any complaints or feedback you submit. These records are retained to maintain a complete history of the support relationship and for quality assurance purposes.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data for the purpose of uniquely identifying a natural person, unless we are required to do so by applicable law (for example, as part of enhanced due diligence under anti-money laundering obligations).

Section 3

How We Use Your Information

The personal data we collect is used only for the purposes for which it was collected or for purposes that are compatible with those original purposes. The primary uses are:

• Account management: creating, maintaining, verifying, and closing Member accounts; resetting passwords and other account credentials; communicating account status updates.
• Transaction processing: executing deposits and withdrawals through bKash, Nagad, Rocket, Upay, and Bangladeshi banking partners; verifying that payment method ownership matches the registered Member; detecting and preventing fraudulent transactions.
• Legal and regulatory compliance: fulfilling our obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and responsible gaming regulations; responding to lawful requests from law enforcement or regulatory authorities; maintaining records required by law.
• Platform improvement and analytics: understanding how Members use the platform, identifying technical issues, optimising game lobby layout and navigation, and measuring the effectiveness of promotions and bonuses.
• Customer support: investigating and resolving complaints, disputes, and technical issues raised by Members; maintaining records of support interactions for quality assurance and training purposes.
• Marketing communications: sending promotional emails, SMS notifications, or in-platform messages about bonuses, new games, and seasonal offers to Members who have not opted out of marketing. You may opt out of marketing communications at any time by contacting [email protected]. Opting out of marketing does not affect your ability to use the platform.

Section 4

Legal Basis for Processing

We process your personal data only where we have a valid legal basis to do so. Depending on the processing activity in question, the applicable legal bases are:

• Contract performance: processing necessary to provide the services you have contracted for — creating your account, processing your deposits and withdrawals, delivering game access, and communicating account information. Without this data we cannot operate your account.
• Legal obligation: processing required to comply with applicable laws and regulations, including AML, KYC, age verification, and the retention of financial records for the periods mandated by law.
• Legitimate interests: processing for fraud prevention, platform security, abuse detection, and internal analytics that helps us improve the service. Where we rely on legitimate interests, we have assessed that our interests do not override your fundamental rights and freedoms.
• Consent: where we send optional marketing communications to you by email or SMS. You may withdraw this consent at any time without affecting the lawfulness of any processing we carried out before your withdrawal.

Section 5

Sharing Your Information

tk877 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the following circumstances and only to the extent strictly necessary:

• Service providers and data processors: payment processing partners (bKash, Nagad, Rocket, Upay, Bangladeshi bank partners, Visa, Mastercard), game technology providers, identity verification services, and hosting infrastructure providers. All such processors are bound by data processing agreements that prohibit them from using your data for any purpose other than delivering the service to tk877.
• Law enforcement and regulatory authorities: where we are legally required or permitted to disclose personal data — for example, in response to a court order, a request from a law enforcement agency, or a direction from a financial intelligence unit investigating money laundering.
• Business transfers: in the event of a merger, acquisition, restructuring, or sale of all or part of tk877's business, personal data held by tk877 may be transferred as part of that transaction. Affected Members will be notified before their data is transferred and becomes subject to a different privacy policy.
• With your explicit consent: where you have specifically requested or agreed to a particular sharing of your data that is not covered by the above categories. You may withdraw any such consent at any time.

Where personal data is shared with third parties outside Bangladesh, tk877 takes reasonable steps to ensure that the receiving party provides an adequate level of protection for that data, consistent with the protections described in this Policy.

Section 6

Payment Data and Financial Records

When you make a deposit or withdrawal on tk877 via bKash, Nagad, Rocket, Upay, or a Bangladeshi bank, the payment is processed by our payment service partners. tk877 retains a record of each transaction — including the payment method identifier, the amount in BDT, the transaction timestamp, and the outcome — but does not store the full credentials of your mobile banking account or bank account. Full payment card numbers and CVV codes are not stored by tk877 at any point.

Financial transaction records relating to your tk877 account are retained for a minimum of five years following the closure of your account, in accordance with applicable financial record-keeping requirements. During this retention period, these records are accessible only to authorised tk877 personnel and, where required by law, to relevant regulatory or law enforcement authorities.

Section 7

Cookies and Tracking Technologies

tk877 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your logged-in session, and understand how Members navigate the site. We use three categories of cookies:

• Strictly necessary cookies: these are essential for the platform to function. They maintain your login session, remember items in your account queue, and ensure secure page transitions. These cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: these collect anonymised data about how Members interact with the platform — which pages are visited most frequently, where users drop off, and how long sessions last. This information is used solely to improve the platform experience and is never linked back to an individual Member's identity.
• Preference cookies: these remember your language settings, display preferences, and other customisation choices so that you do not need to re-enter them on each visit. You may disable preference cookies via your browser settings, though doing so may affect your experience on the platform.

You may manage cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in and using the platform. tk877 does not use third-party advertising cookies or cross-site tracking technologies.

Section 8

Data Retention

tk877 retains personal data only for as long as it is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law. As a general guide: account data and communications records are retained for the duration of the active account relationship and for five years thereafter; financial transaction records are retained for a minimum of five years after account closure; technical log data is typically retained for 12 months and then deleted or anonymised; marketing consent records are retained for as long as you remain an active Member and for two years after your account closes.

Where you request deletion of your personal data and we have no overriding legal obligation to retain it, we will action your request within 30 calendar days. Deletion means the data will be permanently removed from our active systems. Please be aware that some data may remain in encrypted backup archives for up to 90 days following deletion from active systems, after which it will be permanently purged.

Section 9

Your Rights Over Your Personal Data

Subject to applicable law, you have the following rights in relation to the personal data tk877 holds about you. To exercise any of these rights, please contact us at [email protected] with your full name, registered email address, and a description of the right you wish to exercise. We will respond within 30 calendar days.

• Right of access: you may request a copy of the personal data we hold about you, together with information about how it is processed, the purposes for which it is used, and the categories of third parties with whom it has been shared.
• Right of rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it. We will action accurate correction requests promptly.
• Right of erasure: you may request that we delete personal data we hold about you where it is no longer necessary for the purposes for which it was collected, where you withdraw consent on which processing is based, or where the data has been unlawfully processed. This right is subject to our legal retention obligations.
• Right to restrict processing: you may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified, or where you have objected to processing based on legitimate interests.
• Right to object to marketing: you have an absolute right to object to your personal data being used for direct marketing purposes at any time. Upon receipt of such an objection, we will immediately cease using your data for marketing and remove you from all marketing lists.

To exercise any of the above rights, please email [email protected] with the subject line "Data Rights Request" and include your registered name and email address. We will verify your identity before processing the request and will respond within 30 calendar days. Where a request is complex or we receive a high volume of requests, we may extend this period by a further 30 days, in which case we will notify you.

Section 10

Security of Your Personal Data

tk877 takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit between your device and our servers; encryption of sensitive data fields at rest in our databases; access controls that restrict personal data access to authorised personnel only on a need-to-know basis; regular security assessments of our platform infrastructure; and secure disposal procedures for data that is no longer required.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, tk877 will notify affected Members without undue delay once the breach has been identified and contained. The notification will describe the nature of the breach, the approximate number of individuals affected, the likely consequences, and the measures taken or proposed to address it.

Section 11

Children and Minors

The tk877 platform is strictly prohibited to persons under the age of 21. We do not knowingly collect personal data from any individual who is under 21 years of age. If you believe that a minor has created an account or submitted personal data to tk877, please notify us immediately at [email protected]. Upon confirmation, we will promptly close the account, delete the associated personal data, and reverse any transactions where technically possible. tk877 is committed to age verification as both a legal compliance measure and a responsible gaming obligation.

Section 12

Changes to This Privacy Policy

tk877 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or changes in the services we offer. Where a change is material, we will provide at least 14 days' advance notice by posting the updated Policy on this page and, where practicable, notifying registered Members via their registered email address. The date at the top of this page reflects the date of the most recent update. Your continued use of the platform following the effective date of any update constitutes your acceptance of the revised Policy.

Section 13

Contact and Data Controller

tk877 is the data controller in respect of personal data collected and processed through the platform. If you have any questions, concerns, or requests relating to this Privacy Policy or to our handling of your personal data, please contact our dedicated privacy team at [email protected]. Please include "Privacy Enquiry" in the subject line of your email, along with your registered name and email address so that we can verify your identity and respond promptly. Our support team operates 24 hours a day, 7 days a week on Bangladesh Standard Time (BST, UTC+6).