tk10i Privacy Policy

Introduction

This Privacy Policy ("Policy") sets out how tk10i ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "the Player") who access or use the tk10i website at https://tk10i.io and all associated services, games, and payment systems offered therein.

tk10i is committed to handling personal data responsibly, transparently, and in a manner consistent with the principles of data minimisation, purpose limitation, and storage limitation. We take your right to privacy seriously, and this Policy is written to give you a complete, honest, and unambiguous account of our data practices.

This Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which form part of your agreement with the platform. By creating a tk10i account or continuing to use the platform, you confirm that you have read and understood this Policy.

Data We Collect

tk10i collects personal data in three primary ways: data you provide directly when registering or using the platform, data collected automatically as you interact with the platform, and data received from third-party service providers such as payment processors. The following table provides a structured overview of the categories of data we collect and the circumstances in which each category arises.

Data You Choose Not to Provide

Where we ask you to provide personal data and you choose not to do so, we may be unable to provide you with the full range of platform services. For example, failure to complete the KYC verification process will result in your withdrawal capability being suspended until verification is satisfactorily completed.

How We Use Your Data

tk10i uses your personal data only for legitimate, clearly defined purposes. We do not use your data for any purpose incompatible with the purpose for which it was originally collected without first informing you and, where required, obtaining your consent. The following list describes the specific purposes for which we process your personal data:

• Account creation and management: To register your player account, maintain it in good standing, and provide you access to all platform features.
• Identity verification: To comply with Know Your Customer (KYC) obligations and confirm that you meet the minimum age requirement of 21 years.
• Payment processing: To facilitate deposits and withdrawals in BDT via bKash, Nagad, Rocket, and Upay, and to maintain accurate records of all financial transactions.
• Anti-money-laundering compliance: To monitor transactions for unusual patterns, investigate flagged activity, and fulfil mandatory reporting obligations.
• Customer support: To respond to your queries, resolve disputes, and provide assistance via live chat and email.
• Responsible gaming: To identify at-risk players, enforce deposit limits and self-exclusion requests, and promote safe gambling practices among Bangladesh players.
• Platform security: To detect and prevent fraud, account takeovers, multiple account registrations, and other forms of abuse.
• Service improvement: To analyse usage patterns and player behaviour in aggregate form in order to improve the platform's design, game selection, and overall user experience.
• Marketing communications: Where you have given explicit consent, to send promotional emails or SMS messages about bonuses, seasonal offers, and new game releases. You may withdraw this consent at any time.
• Legal compliance: To comply with any legal obligation, court order, or lawful request from a competent authority.

Legal Basis for Processing

Every instance of personal data processing by tk10i is grounded in one or more of the following recognised legal bases:

• Contractual necessity: Processing is necessary to perform our contract with you — specifically, to operate your player account, process transactions, and deliver the services you have requested.
• Legal obligation: Processing is required to comply with applicable laws, including anti-money-laundering regulations and age-verification mandates.
• Legitimate interests: Processing is necessary for tk10i's legitimate business interests, including fraud prevention, platform security, and service improvement, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is not covered by the above bases — most notably in the case of direct marketing communications — we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without detriment to your account.

Data Sharing & Disclosure

tk10i does not sell, rent, or commercially transfer your personal data to third parties. We share your data only in the following specific, limited circumstances:

• Payment service providers: We share the minimum necessary financial data with bKash, Nagad, Rocket, and Upay to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by strict data processing agreements with tk10i.
• Identity verification services: We may engage third-party KYC and identity verification providers to validate the authenticity of documents submitted during the verification process.
• Game software providers: Game studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive limited session data necessary to operate their games within the tk10i platform environment.
• Fraud prevention and AML services: We may share transaction data with third-party compliance tools used to screen for suspicious activity and fulfil anti-money-laundering obligations.
• Legal and regulatory authorities: Where required by law, court order, or lawful direction from a competent regulatory or law enforcement authority, we will disclose personal data as mandated. We will notify you of such disclosure where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of tk10i's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

Payment Data & Mobile Financial Services

Given that tk10i operates primarily in the Bangladesh market and processes all transactions in Bangladeshi Taka (BDT), the platform integrates with leading local Mobile Financial Services (MFS) providers: bKash, Nagad, Rocket (Dutch-Bangla Bank), and Upay. The following applies specifically to how we handle payment-related data in this context:

• When you initiate a deposit or withdrawal, tk10i transmits the minimum required transaction details to the relevant MFS provider to complete the payment. This typically includes the transaction reference number, amount in BDT, and your registered mobile number or account identifier.
• tk10i does not store your full MFS PIN, password, or any credential that would grant access to your mobile banking account. You authenticate directly with your MFS provider's platform during each transaction.
• All payment data transmitted between tk10i and MFS providers is protected by SSL/TLS encryption. tk10i maintains logs of transaction amounts, timestamps, and status codes for a minimum period of five years to satisfy AML record-keeping requirements.
• Deposits and withdrawals may only be made using a payment account registered in the same name as your tk10i player account. Third-party payments are strictly prohibited and will trigger an immediate compliance review.

Cookies & Tracking Technologies

tk10i uses a limited set of cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session while you are logged in, and to remember your preferences between visits. We do not deploy advertising cookies or third-party tracking pixels.

Types of Cookies We Use

• Strictly necessary cookies: These cookies are essential for the platform to operate. They enable you to log in, maintain your session, navigate between pages without losing your account state, and complete transactions securely. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These cookies remember your preferences — such as your language setting and display preferences — to provide a more personalised experience on your next visit. They do not track your activity across other websites.
• Analytical cookies: tk10i may use anonymised, aggregated analytics to understand how players interact with the platform — for example, which pages are visited most frequently and where players encounter difficulties. This data is never linked to your individual identity.

Managing Cookies

You may manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in and using core platform features. Instructions for managing cookies are available in the help section of all major browsers.

Data Retention

tk10i retains personal data for the shortest period necessary to fulfil the purpose for which it was collected, subject to the minimum retention periods required by applicable law. The following retention schedule applies:

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. Anonymised or aggregated data may be retained indefinitely for statistical analysis and service improvement purposes.

Data Security

tk10i employs a multi-layered approach to data security designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include the following:

• 256-bit SSL/TLS encryption for all data in transit between your device and tk10i's servers, including login sessions, deposit flows, and account management actions.
• Password hashing using industry-standard cryptographic algorithms. Your account password is never stored in plain text.
• Access controls that restrict access to personal data to authorised tk10i staff who require it for legitimate operational purposes, on a strict need-to-know basis.
• Server security including firewalls, intrusion detection systems, and regular independent security assessments of the platform infrastructure.
• Session management that automatically logs out inactive sessions after a defined period to reduce the risk of account takeover.
• Fraud monitoring systems that flag unusual login behaviour, device changes, and transaction anomalies in real time.

Notwithstanding the above measures, no method of data transmission or storage is completely infallible. In the event of a data breach that is likely to result in a risk to your rights and freedoms, tk10i will notify you without undue delay and will take all reasonable steps to mitigate the impact of the breach.

Your Rights Over Your Personal Data

Subject to applicable law, you hold the following rights with respect to the personal data tk10i holds about you. All requests should be submitted in writing to [email protected] with the subject line "Data Subject Request — [Your Request Type]". tk10i will respond within 30 days of receiving a valid, verifiable request.

• Right of access: You have the right to request confirmation of whether tk10i holds personal data about you and, if so, to receive a copy of that data along with information about how it is processed.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by tk10i be corrected or completed without undue delay.
• Right to erasure: In certain circumstances, you may request that tk10i delete your personal data. This right is not absolute and does not apply where tk10i is required to retain data to comply with a legal obligation, such as AML record-keeping requirements.
• Right to restriction of processing: You may request that tk10i restricts the processing of your personal data in specific circumstances — for example, while a dispute regarding the accuracy of your data is being resolved.
• Right to data portability: Where processing is based on your consent or a contract, and is carried out by automated means, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. You also have an absolute right to object to your personal data being used for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that took place before the withdrawal.

Children & Minors

tk10i is strictly an adults-only platform. Access to and use of the platform is prohibited for any individual under the age of 21 years. tk10i does not knowingly collect personal data from individuals under 21. If we become aware that a player account has been created by or on behalf of an individual who does not meet the minimum age requirement, we will immediately suspend that account, void all associated activity, and delete or securely destroy all personal data collected in relation to that account, subject to any mandatory retention obligations.

Parents and guardians in Bangladesh who are concerned that a minor in their household may have accessed the tk10i platform are encouraged to contact us immediately at [email protected]. We will investigate and act on all such reports promptly.

Amendments to This Policy

tk10i reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform services. The date of the most recent revision will always be displayed prominently at the top of this document. Where changes are material — meaning they meaningfully affect how we process your data or the rights available to you — we will provide notice to registered players via email or an on-platform notification prior to the changes taking effect.

Your continued use of the tk10i platform following the publication of an amended Privacy Policy constitutes your acknowledgement of the updated terms. It is your responsibility to review this page periodically to remain informed of how we protect your personal data.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how tk10i has handled your personal data, please contact our support team using the details below. All privacy-related correspondence is treated with strict confidentiality.

• Email: [email protected] — subject line: "Privacy Enquiry" or "Data Subject Request"
• Live Chat: Available within your tk10i account after login, 24/7
• Response time: We aim to acknowledge all privacy-related requests within 24 hours and resolve them within 30 calendar days.
• Support hours: 24/7 — Bangladesh Standard Time (UTC+6)

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the appropriate data protection or consumer protection authority in your jurisdiction. tk10i is committed to resolving all privacy concerns promptly and in good faith.