tkwin Privacy Policy — Your Data, Your Rights

Personal Data You Provide Directly

When you register for a tkwin account, use the platform or contact our support team, you provide us with personal data. The categories of personal data we collect directly from you include:

• Identity data: full legal name, date of birth, copies of government-issued identification documents submitted for KYC verification.
• Contact data: Bangladesh mobile phone number, email address (where provided).
• Financial data: deposit and withdrawal transaction records, payment method identifiers (e.g. bKash wallet number), transaction amounts in BDT.
• Account data: username, account ID, login history, session durations, betting and gaming history, balance records, bonus usage.
• Communications data: messages and enquiries sent to tkwin support, including any documentation you attach to those communications.

Data Collected Automatically

When you access and interact with the tkwin platform, certain data is collected automatically by our systems. This includes:

• Technical data: IP address, device type, operating system, browser type and version, screen resolution, referring URL.
• Usage data: pages viewed, features used, time spent on each page, click-path data, game sessions initiated and completed.
• Location data: approximate geographic region inferred from IP address. tkwin does not collect precise GPS location data.
• Cookie data: session cookies, persistent preference cookies, and analytics cookies as further described in Section 7 of this policy.

tkwin uses the personal data we collect for the specific purposes set out in the table below. We do not use your data for any purpose not listed here without first obtaining your consent or without a valid legal basis for doing so.

tkwin processes your personal data only where a valid legal basis exists for doing so. The legal bases we rely upon are as follows:

• Contract performance: processing necessary to provide the services you have requested, including operating your account and processing transactions.
• Legal obligation: processing required for us to comply with applicable laws, including age verification, anti-money-laundering obligations and financial record-keeping requirements.
• Legitimate interests: processing for fraud prevention, security monitoring, platform improvement and analytics, where our interests are not overridden by your fundamental data rights.
• Consent: where you have explicitly opted in to receive marketing communications from tkwin. You may withdraw this consent at any time by contacting our support team.

When We Share Data and With Whom

tkwin does not sell, lease or otherwise commercially exploit your personal data to third parties. We may share your data only in the following limited circumstances:

• Payment processors: we share necessary transaction data with our payment partners (including bKash, Nagad, Rocket, Upay and card networks) solely to process your deposits and withdrawals.
• Game and technology providers: game studios and platform technology providers who deliver games and services on the tkwin platform may receive anonymised or pseudonymised session data necessary for service delivery.
• Legal and regulatory disclosure: we may be required to disclose personal data to law enforcement authorities, regulatory bodies or courts where we are legally obligated to do so under applicable law.
• Fraud prevention partners: in cases of suspected fraud, money laundering or other criminal activity, we may share relevant data with specialist fraud-prevention services or financial intelligence units.

All third parties with whom we share your data are required to process it in accordance with applicable data protection obligations and are not permitted to use it for their own unrelated commercial purposes.

How tkwin Uses Cookies

The tkwin website uses cookies and similar tracking technologies to operate correctly, remember your preferences and analyse how the platform is used. We use three categories of cookies:

• Essential cookies: strictly necessary for the platform to function. These include session authentication cookies that keep you logged in during your visit and security cookies that help detect fraudulent login attempts. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: used to collect aggregated, anonymised data about how visitors use the platform — pages visited, time spent, navigation paths. This data is used to improve platform design and performance. It does not identify you personally.
• Preference cookies: remember your settings such as language preference and display options so you do not have to re-enter them on each visit.

You can control cookies through your mobile or desktop browser settings. Please note that disabling essential cookies may prevent parts of the tkwin platform from operating correctly. Disabling analytics or preference cookies will not affect your ability to use the platform's core features.

tkwin retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal obligations, or to resolve disputes and enforce agreements. The specific retention periods applicable to different categories of data are as follows: account and identity data is retained for the duration of your account plus a minimum of five (5) years following account closure, in order to comply with anti-money-laundering record-keeping obligations; financial transaction records are retained for a minimum of five (5) years; communications data (support correspondence) is retained for two (2) years from the date of the last interaction.

When your data is no longer required for any lawful purpose, tkwin will securely delete or anonymise it. Anonymised data (data that can no longer be used to identify you) may be retained indefinitely for aggregated analytics and platform improvement purposes.

tkwin implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration or destruction. These measures include SSL encryption for all data in transit between your device and our servers, secure storage of data at rest using industry-standard encryption protocols, strict internal access controls limiting which staff members can access personal data and under what conditions, regular security reviews and vulnerability assessments of our platform infrastructure, and multi-factor authentication requirements for administrative access to systems holding personal data.

While tkwin takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, tkwin will notify affected users without undue delay and will take all appropriate steps to contain and remediate the breach.

As a user of the tkwin platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the email address displayed in the footer of this website.

• Right of access: you may request a copy of the personal data tkwin holds about you, together with information about how it is being used.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations tkwin is required to comply with.
• Right to restrict processing: in certain circumstances you may ask tkwin to suspend processing of your personal data, for example while a rectification request is being considered.
• Right to data portability: where processing is based on your consent or on a contract, you may request that tkwin provide your personal data in a structured, commonly used, machine-readable format.

tkwin will respond to all data rights requests within a reasonable timeframe. We may need to verify your identity before actioning any request. Where a request is refused or only partially fulfilled, we will explain the reason in writing.

The tkwin platform does not contain links to external third-party websites. All navigation within the platform remains within tkwin.bio. In the event that any third-party content or link appears on the platform, tkwin accepts no responsibility for the privacy practices or data-handling policies of those third parties. We encourage you to review the privacy policy of any platform you visit independently of tkwin.

tkwin reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations or platform features. When a material change is made, we will endeavour to notify registered users via the platform or by other appropriate means prior to the change taking effect. The updated policy will carry a revised effective date at the top of this page.

Your continued use of the tkwin platform following any update to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the revised policy, you should stop using the platform and contact our support team to request closure of your account.

If you wish to exercise any of your data rights, have a question about this Privacy Policy, or want to raise a concern about how tkwin has handled your personal data, please contact our support team using the email address displayed in the footer of this website. Please include your full name, registered account username, and a clear description of your request or concern so we can handle it efficiently.

tkwin aims to acknowledge all privacy-related enquiries within 48 hours and to resolve them fully within a reasonable timeframe. For complex requests involving large volumes of data or requiring legal review, we will keep you informed of progress and provide an estimated resolution timeline.