🔒

Your Data, Your Rights

tk10a Privacy Policy — How We Collect, Use, and Protect Your Personal Data

At tk10a, protecting the privacy of every Bangladeshi player is a core commitment, not an afterthought. This Privacy Policy explains in clear terms what personal data we collect, why we collect it, how it is used, who it may be shared with, and the rights you hold over your own information. Please read this document carefully before creating an account.

Effective Date: 1 January 2026

Last Updated: 1 January 2026

Applicable: Bangladesh Players

Privacy at a Glance

Our Core Data Protection Commitments

These six points summarise tk10a's approach to your privacy. They complement — and do not replace — the full Privacy Policy text below.

Minimal Data Collection

tk10a only collects personal data that is strictly necessary to operate your account, process transactions in BDT, complete KYC verification, and deliver our services. We do not collect data for its own sake or maintain unnecessary records beyond legally required retention periods.

SSL Encryption on All Data

All data transmitted between your device and tk10 a's servers is protected by industry-standard SSL/TLS encryption. Stored data is secured using encrypted databases with access controls restricted to authorised personnel only. We conduct regular security reviews to maintain the integrity of our systems.

No Sale of Personal Data

tk10a does not sell, rent, or trade your personal data to any third party for commercial purposes. When data is shared with service providers — such as payment processors like bKash, Nagad, and Rocket — it is strictly limited to what is required to complete the relevant transaction or compliance obligation.

Your Right to Control Your Data

Players have the right to access, correct, and request deletion of their personal data held by tk10a, subject to applicable legal and regulatory retention requirements. You may exercise these rights at any time by contacting our support team at [email protected].

Transparent Cookie Use

tk10a uses cookies and similar tracking technologies solely to improve platform performance, maintain session security, and understand aggregate usage patterns. We do not use third-party advertising cookies. Our full cookie practices are detailed in Section 9 of this Privacy Policy.

Defined Retention Periods

We retain personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Financial and KYC records are typically retained for a minimum of five years in line with anti-money-laundering obligations. Inactive account data is reviewed and purged periodically.

1. Introduction
2. Data Controller
3. Data We Collect
4. How We Collect Data
5. Legal Basis for Processing
6. How We Use Your Data
7. Data Sharing
8. Data Retention
9. Cookies and Tracking
10. Your Rights
11. Data Security
12. Children's Privacy
13. Third-Party Links
14. Policy Amendments
15. Contact Us

Last updated: 1 January 2026

                Summary: tk10a is committed to handling your personal data with transparency and care. This Privacy Policy applies to all users of the tk10a platform, including visitors who have not yet registered an account. By using tk10a, you acknowledge that you have read and understood this policy. If you do not agree with any part of this policy, please discontinue use of the platform.
              

1 Introduction

tk10a ("we", "us", "our") operates the online casino and sports betting platform accessible at tk10a.io, serving players across Bangladesh. As the operator of this platform, we act as the data controller in respect of the personal data you provide to us or that we collect in the course of your use of our services.

This Privacy Policy has been prepared to give you a clear, honest, and complete account of our data practices. We are committed to processing your personal data lawfully, fairly, and transparently, and to maintaining appropriate technical and organisational measures to protect it against unauthorised access, loss, or misuse.

This policy should be read together with our Terms & Conditions, which govern the overall relationship between you and tk10a. Where this Privacy Policy and the Terms & Conditions address the same subject matter, the more specific provision shall apply.

2 Data Controller

For the purposes of applicable data protection law, the data controller responsible for your personal data is tk10a, the operator of the tk10a.io platform. All data protection enquiries, access requests, and complaints should be directed to our support team using the contact details set out in Section 15 of this policy.

Note: tk10a processes all player data in connection with the operation of its online gaming platform. We take our responsibilities as data controller seriously and have appointed internal personnel responsible for overseeing data protection compliance.

3 Personal Data We Collect

Depending on how you interact with the tk10a platform, we may collect the following categories of personal data:

Category	Examples	When Collected
Identity Data	Full name, date of birth, National ID number, passport number	Registration and KYC verification
Contact Data	Email address, mobile phone number, residential address	Registration and account management
Financial Data	bKash/Nagad/Rocket mobile number, bank account details, transaction history in BDT	Deposit, withdrawal, and KYC processes
Usage Data	Games played, bets placed, session duration, navigation patterns, device type	Automatically during platform use
Technical Data	IP address, browser type, operating system, device identifiers	Automatically on each visit
Communications Data	Support chat transcripts, email correspondence, complaint records	When you contact our support team
Verification Documents	Scanned or photographed ID documents, address proof documents	KYC verification upon withdrawal request

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. If any such data is incidentally included in documents you submit for KYC, it is processed solely for identity verification purposes and is not used for any other purpose.

4 How We Collect Your Data

tk10a collects personal data through the following methods:

Direct collection: Data you provide actively when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, or contacting our customer support team.
Automated collection: Data collected automatically as you use the platform, including usage logs, session data, and technical data gathered via cookies and server-side logging.
Third-party sources: In certain cases, we may receive identity verification data from third-party KYC or anti-fraud service providers engaged to assist in verifying your identity and age. We may also receive limited data from payment providers such as bKash, Nagad, and Rocket to confirm the status of a transaction.

5 Legal Basis for Processing Your Data

tk10a processes your personal data on the following legal grounds:

Contractual necessity: Processing that is necessary to perform the contract between you and tk10a — for example, creating and managing your account, processing deposits and withdrawals, and providing access to games.
Legal obligation: Processing required to comply with applicable laws — for example, retaining financial transaction records for anti-money-laundering (AML) compliance, and verifying your age and identity as required by responsible gaming obligations.
Legitimate interests: Processing that serves tk10a's legitimate business interests, provided those interests are not overridden by your rights — for example, fraud detection, platform security, and service improvement analytics.
Consent: Where we rely on your consent — for example, for sending marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 How We Use Your Personal Data

tk10a uses the personal data we collect for the following purposes:

To create, verify, and manage your player account on the tk10a platform.
To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and supported Bangladeshi bank channels.
To conduct age verification and identity checks as required by our responsible gaming policy and KYC obligations.
To detect and prevent fraud, money laundering, bonus abuse, and other prohibited conduct as described in our Terms & Conditions.
To provide customer support, respond to your enquiries, and resolve complaints.
To personalise your experience on the platform, including surfacing relevant games and promotions based on your playing history.
To send you transactional communications such as deposit confirmations, withdrawal updates, and account security alerts.
To send promotional and marketing communications where you have consented to receive them. You may opt out of marketing emails at any time.
To comply with applicable legal and regulatory obligations, including AML record-keeping requirements.
To improve and develop the tk10a platform through aggregate usage analytics.

                tk10a does not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight. All account suspensions and fraud investigations involve human review before a final determination is made.
              

7 Sharing Your Personal Data

tk10a does not sell your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

Payment processors: bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks — solely to process your deposit and withdrawal instructions in BDT.
KYC and identity verification providers: Third-party services engaged to assist with age and identity verification, subject to confidentiality obligations.
Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe may receive pseudonymised session data to facilitate game delivery and fair play certification.
Fraud prevention and security services: Technology providers engaged to detect suspicious activity, manage cybersecurity threats, and protect the integrity of the platform.
Legal and regulatory authorities: Where required by law, court order, or regulatory direction, we may disclose personal data to relevant authorities. We will notify you where we are legally permitted to do so.
Business transfers: In the event of a merger, acquisition, or sale of all or part of the tk10a business, personal data may be transferred to the successor entity, subject to equivalent data protection commitments.

Important: Any third party receiving your personal data from tk10a is contractually required to maintain the confidentiality and security of that data and to use it only for the specified purpose. tk10a remains responsible for ensuring these obligations are upheld.

8 Data Retention

tk10a retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. The following general retention periods apply:

Account and identity data: Retained for the duration of your active account relationship with tk10a, plus a minimum of five years following account closure, in compliance with AML record-keeping requirements.
Financial transaction records: Retained for a minimum of five years from the date of each transaction, as required by applicable financial regulations.
KYC documents: Retained for the duration of your account plus five years following account closure.
Customer support communications: Retained for three years from the date of the most recent communication in a given thread, or longer if the communication relates to an ongoing complaint or legal matter.
Usage and technical data: Typically retained in identifiable form for up to 24 months, after which it may be aggregated and anonymised for analytical purposes.
Marketing consent records: Retained for the duration of the consent, plus a reasonable period thereafter to demonstrate compliance.

When personal data is no longer required and its retention period has expired, it is securely deleted or anonymised in accordance with our internal data disposal procedures.

9 Cookies and Tracking Technologies

The tk10a platform uses cookies and similar technologies to ensure the platform functions correctly, to maintain the security of your session, and to gather aggregate analytics about how the platform is used. The following types of cookies are used:

Essential cookies: These cookies are strictly necessary for the platform to operate. They enable session management, authentication, and security functions. You cannot opt out of essential cookies while using the platform.
Performance and analytics cookies: These cookies collect anonymised or pseudonymised data about how players navigate the platform — for example, which pages are visited most frequently and where errors occur. This data is used solely to improve the platform's performance and user experience.
Functional cookies: These cookies remember your preferences — such as language settings and display options — to provide a more personalised experience across sessions.

tk10a does not use third-party advertising or behavioural tracking cookies. We do not participate in cross-site tracking or retargeting programmes. You may manage cookie settings through your browser's privacy controls; however, disabling essential cookies may impair your ability to use the platform.

10 Your Privacy Rights

As a tk10a player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact us using the details in Section 15:

Right of access: You may request a copy of the personal data we hold about you, along with information about how it is being used.
Right to rectification: You may ask us to correct personal data that is inaccurate or incomplete. You may also update certain account information directly through your account settings.
Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
Right to restriction of processing: In certain circumstances, you may ask us to restrict the processing of your data — for example, while the accuracy of that data is being disputed.
Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your personal data in a structured, machine-readable format.
Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
Right to object: You may object to the processing of your personal data where that processing is based on legitimate interests, including profiling for direct marketing purposes.

We will respond to all valid data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, and we will notify you accordingly. There is no charge for exercising your rights unless a request is manifestly unfounded or excessive.

11 Data Security

tk10a implements a range of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, alteration, or disclosure. These measures include:

SSL/TLS encryption for all data in transit between your device and our servers.
Encrypted storage of sensitive data, including identity documents and financial information.
Role-based access controls limiting internal access to personal data to authorised personnel only, on a strict need-to-know basis.
Regular security assessments and penetration testing of platform infrastructure.
Multi-factor authentication options for player accounts to reduce the risk of unauthorised access.
Incident response procedures to detect, contain, and report data security incidents in a timely manner.

While tk10a takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You play an important role in keeping your account secure — please use a strong, unique password and do not share your login credentials with anyone.

12 Children's Privacy — 21+ Policy

tk10a's platform is strictly restricted to individuals aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you believe a minor has registered on the tk10a platform, please notify us immediately at [email protected]. We will investigate and act without delay. Protecting underage individuals from gambling-related harm is a matter of the highest priority at tk10a.

13 Third-Party Links

The tk10a platform may contain references to game providers or payment partners. Please note that this Privacy Policy applies solely to the tk10a platform and does not govern the data practices of any third-party service or platform. We strongly encourage you to review the privacy policies of any third-party services you interact with in connection with your use of tk10a, including your mobile money provider (bKash, Nagad, Rocket) and your bank.

tk10a is not responsible for the privacy practices or content of any third-party platforms or services.

14 Amendments to This Privacy Policy

tk10a reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players by email or through a prominent notice on the platform, at least 7 days before the revised policy takes effect.

We encourage you to review this Privacy Policy periodically. Your continued use of the tk10a platform after the effective date of any revised policy constitutes your acceptance of the updated terms. The "Last Updated" date at the top of this document indicates when the most recent revision was made.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to tk10a's handling of your personal data, please contact our data protection team using the details below. All communications must be in English.

Email: [email protected]
Response time: We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days (Bangladesh Standard Time, UTC+6).
Support availability: 24 hours a day, 7 days a week, 365 days a year.

                This Privacy Policy was last reviewed and updated on 1 January 2026. tk10a is committed to maintaining transparent and responsible data practices for all Bangladeshi players. If you feel your privacy rights have not been respected, you have the right to escalate your complaint through formal dispute resolution channels as described in our Terms & Conditions.
              