tk22 Privacy Policy – How We Protect Your Data
At tk22, we take your privacy seriously. This Privacy Policy explains exactly what personal data we collect when you use our platform, how we use and protect that data, who we share it with, and what rights you hold over your own information. We are committed to transparent, responsible data handling for all players in Bangladesh.
Our Privacy Commitments
How tk22 Safeguards Your Information
These six principles underpin every data handling decision we make at tk22. They translate our Privacy Policy into concrete, player-facing commitments you can rely on.
SSL Encryption at Every Step
Every data exchange between your device and the tk22 platform — from login and deposits to live chat — is protected by industry-standard SSL/TLS encryption. Your personal and financial details are never transmitted in plain text.
No Sale of Personal Data
tk22 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Data is shared only with the service providers who directly support the operation of the tk22 platform, and always under strict contractual safeguards.
Minimal Data Collection
We collect only the personal data that is strictly necessary to operate the tk22 platform, process transactions, verify player identity, and comply with applicable legal obligations. We do not collect data beyond what is required for these defined purposes.
Your Right to Access & Erasure
Registered tk22 players have the right to request a full copy of the personal data we hold about them, to correct inaccurate information, and to request deletion of their data where there is no legal obligation to retain it. Requests are processed within 30 days.
Defined Data Retention Periods
tk22 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or to meet legal and regulatory obligations. Once the applicable retention period expires, data is securely deleted or anonymised.
Marketing Opt-Out at Any Time
Players who have opted into receiving promotional communications from tk22 may withdraw that consent at any time by contacting support or clicking the unsubscribe link in any marketing email. Opt-out requests are processed within 5 business days.
Data We Collect
Personal Data Categories at a Glance
The table below summarises the main categories of personal data that tk22 collects, the reason for collection, and the standard retention period applied to each category.
| Data Category | Examples | Purpose | Retention Period |
|---|---|---|---|
| Identity Data | Full name, date of birth, national ID / passport number | Account registration, age & identity verification (KYC) | 5 years after account closure |
| Contact Data | Email address, phone number, Dhaka / Chittagong / Sylhet city of residence | Account communication, support, promotional emails (with consent) | 5 years after account closure |
| Financial Data | bKash / Nagad / Rocket / Upay account reference, bank account last 4 digits, transaction history | Payment processing, fraud prevention, withdrawal verification | 7 years (regulatory requirement) |
| Technical Data | IP address, device type, browser type, operating system, session timestamps | Platform security, fraud detection, geographic access checks | 12 months from collection |
| Gaming Activity Data | Game history, bet amounts, win/loss records, bonus usage, session durations | Fair play monitoring, responsible gaming tools, dispute resolution | 5 years after account closure |
| Communications Data | Live chat transcripts, support emails, complaint records | Customer support, complaints handling, quality assurance | 3 years from date of communication |
| Cookie & Usage Data | Pages visited, time on page, click paths, referring URL | Platform performance analytics, user experience improvement | 13 months from collection |
* Retention periods may be extended where required by applicable law, ongoing legal proceedings, or active investigations.
Your privacy matters to us. This Privacy Policy describes in plain, clear English how tk22 handles your personal data. Please read it carefully. By creating a tk22 account or using the platform in any capacity, you confirm that you have read and understood this policy and consent to the data practices described herein.
1. Introduction
This Privacy Policy ("Policy") sets out the basis on which tk22 ("tk22", "we", "us", "our") collects, processes, stores, and shares personal data in connection with the operation of the online casino and sports betting platform available at https://tk22.io (the "Platform"). It applies to all registered players, prospective players who browse the Platform without registering, and any individual who contacts tk22 via email or live chat support.
tk22 is committed to protecting and respecting the privacy of all individuals whose personal data we handle. This Policy has been prepared in accordance with internationally recognised data protection principles and is designed to ensure that you fully understand how your data is used and what choices you have in relation to it.
This Policy should be read alongside the tk22 Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and tk22. This Policy was last reviewed and updated on 1 January 2026.
2. Data Controller
For the purposes of this Privacy Policy, tk22 acts as the data controller in respect of all personal data collected through the Platform. As data controller, tk22 determines the purposes for which and the means by which your personal data is processed.
If you have any questions about this Policy, wish to exercise any of your data rights, or need to raise a privacy-related concern, you may contact the tk22 Data Protection point of contact using the details provided in Section 15 (Contact Us) of this Policy.
All data processed by tk22 is handled within a secure infrastructure protected by SSL encryption, access controls, and regular security audits. tk22 does not process sensitive special-category data (such as health data, biometric data, or political opinions) in connection with the operation of the Platform.
3. Data We Collect
tk22 collects personal data from you through the following channels and in the following categories:
Data you provide directly:
- Registration data: When you create a tk22 account, you provide your full name, date of birth, email address, phone number, and a chosen username and password. This information is used to create and maintain your account.
- Identity verification data: When completing our Know Your Customer (KYC) verification process — which may be required before your first withdrawal — you may be asked to provide a copy of your National Identity Card (NID), passport, or other government-issued photo identification, as well as proof of your payment method (e.g., a screenshot of your bKash or Nagad account).
- Payment data: When making deposits or requesting withdrawals, we collect transaction references and account identifiers associated with your chosen payment method (bKash, Nagad, Rocket, Upay, bank account). We do not store full card numbers or full mobile banking PINs.
- Communications data: Any information you submit via live chat, support email, or our contact form, including the content of your messages and any attachments you provide.
Data collected automatically:
- Technical data: Your IP address, device type and model, operating system, browser type and version, screen resolution, and session timestamps are collected automatically when you access the Platform.
- Gaming activity data: A complete log of your betting and gaming activity is recorded, including games played, bet amounts placed, outcomes, bonus activity, and responsible gaming tool usage (e.g., deposit limit settings and self-exclusion requests).
- Cookie and analytics data: Information about how you navigate the Platform, which pages you visit, how long you spend on each section, and what links you click. See Section 10 (Cookies) for full details.
4. How We Use Your Data
tk22 uses your personal data for the following purposes:
- Account management: To create, maintain, and administer your tk22 player account, including processing your login, managing your balance, and recording your gaming history.
- Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, and to maintain accurate financial records of all transactions associated with your account.
- Identity verification and fraud prevention: To verify that you meet the platform's 21+ age requirement and to detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and any other prohibited conduct.
- Responsible gaming: To support the delivery of responsible gaming tools including deposit limits, session time limits, reality checks, and self-exclusion. Your gaming activity data is used to monitor for signs of problem gambling patterns and to contact you with responsible gaming guidance where appropriate.
- Customer support: To respond to your enquiries, resolve complaints, and provide technical assistance in relation to your use of the Platform.
- Legal compliance: To comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, record-keeping obligations, and any mandatory reporting obligations.
- Platform improvement: To analyse usage patterns and player feedback in order to improve the performance, design, and functionality of the tk22 Platform.
- Marketing communications (with consent only): To send you promotional offers, bonus notifications, and news about tk22 products — but only where you have explicitly opted in to receiving such communications. You may withdraw this consent at any time.
5. Legal Basis for Processing
tk22 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
- Contractual necessity: Processing your registration data, transaction data, and gaming activity data is necessary to perform the contract between you and tk22 (i.e., to provide the Platform services you have signed up to use).
- Legal obligation: Certain processing activities — particularly identity verification, financial record-keeping, and AML monitoring — are required by applicable law and cannot be waived.
- Legitimate interests: tk22 processes technical data and gaming activity data for fraud detection, platform security, and responsible gaming monitoring based on its legitimate interest in operating a safe, fair, and legally compliant platform. These interests are balanced against your privacy rights and do not override them.
- Consent: Where tk22 sends you marketing communications or sets non-essential cookies, it does so only on the basis of your freely given, informed, and specific consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
6. Data Sharing & Third Parties
tk22 does not sell your personal data to any third party. We share your personal data only in the following limited and controlled circumstances:
- Payment processors: Your transaction data is shared with the relevant payment service providers (such as bKash, Nagad, Rocket, Upay, and banking partners) solely for the purpose of processing your deposit or withdrawal transaction.
- Game providers: Your player account identifier and gaming session data may be shared with third-party game providers (such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Spribe, and Playtech) to the extent necessary to deliver their games on the tk22 Platform. These providers operate under their own privacy frameworks and are contractually prohibited from using your data for any other purpose.
- Identity verification providers: Where we use third-party KYC or AML compliance tools to assist in verifying your identity or monitoring transactions, your identity documents and relevant account data may be shared with those providers under strict data processing agreements.
- Analytics and performance providers: Anonymised or aggregated usage data may be shared with third-party analytics providers to help us understand Platform performance. No personally identifiable information is shared for analytics purposes.
- Legal and regulatory authorities: tk22 may be required by law, court order, or a competent regulatory authority to disclose certain personal data. In such cases, disclosure will be made only to the extent strictly required by the applicable legal obligation.
- Business transfers: In the event of a merger, acquisition, or sale of all or part of the tk22 business, your personal data may be transferred to the successor entity, subject to equivalent privacy protections being maintained. You will be notified of any such transfer.
All third parties with whom tk22 shares personal data are required to maintain the confidentiality and security of that data and are prohibited from using it for any purpose other than that for which it was shared.
7. International Data Transfers
The tk22 Platform is operated primarily to serve the Bangladesh market. However, some of our third-party service providers — including certain game providers and technical infrastructure partners — may process personal data on servers located outside of Bangladesh.
Where personal data is transferred internationally, tk22 takes appropriate steps to ensure that such transfers are carried out in accordance with applicable data protection principles, including by entering into standard contractual clauses with the receiving party or by relying on other recognised transfer mechanisms that ensure an adequate level of data protection.
If you have any questions about the international transfer of your personal data, please contact us at the address provided in Section 15.
8. Data Retention
tk22 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to maintain the relationship between you and tk22, and to comply with applicable legal, regulatory, and reporting obligations. Our standard retention periods are set out in the data categories table at the top of this page.
Upon closure of your tk22 account — whether initiated by you or by tk22 — your personal data will be retained for a minimum of five (5) years to comply with financial record-keeping and AML obligations. Financial transaction records are retained for a minimum of seven (7) years.
At the end of the applicable retention period, your personal data will be securely deleted, destroyed, or irreversibly anonymised. Anonymised data (which can no longer identify you) may be retained indefinitely for statistical and analytical purposes.
9. Data Security
tk22 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
- SSL/TLS encryption for all data transmitted between your device and the tk22 Platform.
- Encryption at rest for sensitive stored data including identity documents and financial records.
- Strict access controls ensuring that personal data is accessible only to authorised tk22 personnel who require it to perform their role.
- Regular penetration testing and vulnerability assessments of the Platform infrastructure.
- Multi-factor authentication requirements for administrative access to player data systems.
- Staff training on data protection obligations and information security best practices.
Notwithstanding these measures, no internet-based platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, tk22 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.
You are also responsible for keeping your own tk22 login credentials confidential. tk22 will never ask for your password by email, live chat, or any other channel. If you suspect your account credentials have been compromised, contact support immediately at [email protected].
10. Cookies & Tracking Technologies
tk22 uses cookies and similar tracking technologies (including local storage and session storage) to operate the Platform and to improve your experience. Cookies are small text files placed on your device by your browser when you visit a website.
The following categories of cookies are used on the tk22 Platform:
- Strictly necessary cookies: These are essential for the Platform to function. They enable core features such as session management, login persistence, and security validation. These cookies cannot be disabled.
- Functional cookies: These remember your preferences (such as your preferred language and display settings) so that you do not need to re-enter them on each visit.
- Analytics cookies: These collect anonymised information about how visitors use the Platform — such as which pages are most visited and how users navigate between sections — to help us improve Platform performance. This data is aggregated and does not identify individual users.
- Marketing cookies (with consent): Where you have consented to receiving personalised promotions, these cookies enable tk22 to deliver relevant offers and promotional messaging. You may withdraw this consent at any time.
You may control and manage cookies through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be turned off without ceasing to use the Platform.
11. Your Data Rights
As a player whose personal data is processed by tk22, you have the following rights in relation to that data. To exercise any of these rights, please contact us at [email protected] with the subject line "DATA RIGHTS REQUEST":
- Right of access: You have the right to request a copy of all personal data that tk22 holds about you. We will provide this within 30 days of receiving a valid request.
- Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
- Right to erasure ("right to be forgotten"): You may request that we delete your personal data where: (a) it is no longer necessary for the purpose for which it was collected; (b) you withdraw your consent and there is no other legal basis for processing; or (c) you object to processing and there are no overriding legitimate grounds. Note that this right does not apply where retention is required by law (e.g., for AML or financial record-keeping obligations).
- Right to restrict processing: In certain circumstances, you may request that we limit how we use your data, for example while a dispute regarding its accuracy is being resolved.
- Right to data portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to object: You have the right to object at any time to processing of your personal data based on tk22's legitimate interests, including for direct marketing purposes. Where you object to marketing, we will cease processing your data for that purpose immediately.
- Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
tk22 will respond to all data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.
12. Children & Minors
The tk22 Platform is strictly for adults aged 21 years and above. tk22 does not knowingly collect personal data from any individual under the age of 21. If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account.
If you are a parent or guardian and believe that a minor in your care has registered on or accessed the tk22 Platform, please contact us immediately at [email protected]. We treat all such reports with urgency and will investigate and act upon them within 24 hours of receipt.
13. Third-Party Links
The tk22 Platform may contain references to or integrations with third-party game providers and payment services. While we take care to work only with reputable and trusted partners, tk22 is not responsible for the privacy practices of third-party websites, applications, or services that are accessible from or integrated with the Platform.
We encourage you to review the privacy policies of any third-party services you use in connection with your tk22 account, particularly those of your chosen payment method provider (such as bKash or Nagad) and any game provider whose standalone website you may visit.
14. Changes to This Privacy Policy
tk22 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered players by email to the address associated with their account, or via an on-screen notification upon their next login, at least seven (7) days before the changes take effect.
The effective date at the top of this Policy will be updated with each revision. We encourage you to review this Policy periodically to stay informed about how tk22 handles your personal data. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the changes.
15. Contact Us
If you have any questions, concerns, or requests in relation to this Privacy Policy or the way tk22 handles your personal data, please contact us using the details below. All privacy-related enquiries are handled by our support team and will be acknowledged within 24 hours.
Privacy & Data Protection Contact:
Email: [email protected] (plain text — not a clickable link)
Subject line for data rights requests: "DATA RIGHTS REQUEST"
Subject line for privacy concerns: "PRIVACY ENQUIRY"
Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
Response Time: Within 24 hours for acknowledgement; within 30 days for substantive data rights responses.
When submitting a data rights request, please include your registered tk22 username, the email address associated with your account, and a clear description of the right you wish to exercise. This will help us locate your records and process your request as efficiently as possible.
Ready to Explore tk22?
Now that you understand how tk22 protects your data, discover everything the platform has to offer — from live cricket betting to premium casino games and slots.