tk baji Privacy Policy

tk baji collects personal data in several distinct categories, each serving a specific operational or legal purpose. We describe each category in detail below.

Identity and Contact Data

When you register an account on tk baji, we collect your full legal name, date of birth, residential address (including city and division within Bangladesh, such as Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, or Mymensingh), email address, and mobile phone number. This information is necessary to create and maintain your account, communicate with you about account activity, and verify your identity as part of our KYC (Know Your Customer) process.

Identity Verification Documents

As part of our KYC verification process, tk baji will request copies of government-issued identity documents — such as a National Identity Card (NID), passport, or driving licence — together with a document confirming your residential address, such as a recent utility bill or bank statement. These documents are processed solely for the purpose of age verification, identity confirmation, and anti-money-laundering compliance. Document images are stored in encrypted form and are accessible only to authorised compliance personnel.

Financial and Transaction Data

tk baji records all financial transactions associated with your account, including deposit amounts, withdrawal requests, payment method identifiers (such as your registered bKash or Nagad mobile number, or the last four digits of a linked Visa or Mastercard), and transaction timestamps. We do not store full card numbers or mobile banking PINs on our servers at any point. Payment data is processed through encrypted, PCI-compliant payment gateways.

Technical and Usage Data

When you access the tk baji platform, our servers automatically log technical data including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, session duration, and in-game actions. This technical data is used to operate the platform, detect fraud, troubleshoot technical issues, and analyse aggregate usage patterns to improve the service.

Communications Data

If you contact tk baji customer support via live chat or email, we retain records of those communications, including the content of messages, timestamps, and the support agent's responses. This data is used to resolve your query, maintain service quality, and as a reference in the event of a subsequent dispute.

tk baji processes your personal data only for clearly defined, legitimate purposes. The table below sets out the primary purposes for which your data is used, together with the legal basis for each processing activity.

tk baji will not use your personal data for any purpose that is incompatible with those listed above without first notifying you and, where required, obtaining your consent. Where our processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

Automated Decision-Making

tk baji uses automated systems to assist with fraud detection and responsible gaming monitoring. These systems may flag an account for manual review if certain behavioural thresholds are exceeded. No fully automated decision that produces a significant legal or similarly significant effect on you will be made without a human review step. You have the right to request human review of any automated decision that affects your account status.

tk baji does not sell or rent your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent necessary to fulfil the stated purpose.

Payment Service Providers

To process deposits and withdrawals, tk baji shares necessary financial data with licensed payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and international card networks (Visa, Mastercard). Each of these providers operates under their own privacy policy and is independently responsible for the data they receive in the context of processing your transaction. tk baji is not responsible for the data practices of third-party payment providers, though we only engage providers who maintain industry-standard data security practices.

Identity Verification Partners

During the KYC verification process, tk baji may share copies of identity documents with third-party identity verification service providers. These partners process document images solely for the purpose of confirming authenticity and verifying your identity against our records. They are contractually prohibited from using your data for any other purpose.

IT Infrastructure and Hosting

tk baji's platform is hosted on secure cloud infrastructure. Our hosting and infrastructure providers may have technical access to server data as part of maintaining the underlying systems. All such providers are bound by data processing agreements that restrict their use of any data encountered in the course of providing infrastructure services.

Legal and Regulatory Disclosures

tk baji may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, a binding court order, or to protect the legal rights of tk baji or its users. We will, where legally permissible, notify you of such a disclosure before it occurs.

tk baji uses cookies and similar technologies — including local storage, session storage, and pixel tags — to operate and improve the platform. Cookies are small text files placed on your device by the tk baji website. They allow the platform to remember your session, preferences, and activity across page visits.

Types of Cookies We Use

Managing Your Cookie Preferences

You can manage or delete cookies through your browser settings at any time. Most modern browsers allow you to block all cookies, accept only first-party cookies, or delete existing cookies. Please note that disabling strictly necessary or fraud prevention cookies will impair the functionality of the tk baji platform — in particular, you may be unable to maintain a login session or complete financial transactions if essential cookies are blocked.

tk baji does not use advertising cookies or pass cookie data to third-party advertising networks. The analytics data we collect is used exclusively for internal platform improvement and is not shared with external marketing platforms.

tk baji retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply as a general guideline:

• Account data (identity, contact, login): Retained for the duration of your active account plus a minimum of five years following account closure, in accordance with anti-money-laundering record-keeping obligations.
• KYC verification documents: Retained for a minimum of five years from the date of the last transaction on the account, or such longer period as may be required by applicable law.
• Financial and transaction records: Retained for a minimum of seven years to comply with financial record-keeping obligations.
• Customer support communications: Retained for three years from the date of the most recent communication in the relevant support thread.
• Technical and usage logs: Retained in identifiable form for up to 12 months, after which they are anonymised and may be retained in aggregate form indefinitely for statistical analysis.
• Marketing consent records: Retained for the duration of your active account and for three years following opt-out or account closure.

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Where data is retained beyond the standard period due to an ongoing investigation, regulatory inquiry, or legal dispute, it will be deleted as soon as the relevant matter is resolved.

tk baji implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption at rest for all stored personal data, including identity documents and financial records.
• Role-based access controls ensuring that only authorised personnel with a documented need can access personal data.
• Regular internal security audits and vulnerability assessments of the platform infrastructure.
• Two-factor authentication options for player accounts to reduce the risk of unauthorised access resulting from credential theft.
• Automated anomaly detection systems that flag unusual account activity for manual review.
• Strict data processing agreements with all third-party service providers who handle personal data on our behalf.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, tk baji will notify affected players as promptly as is practicable after becoming aware of the breach, and will take immediate steps to mitigate the impact.

Players are also responsible for their own account security. You should use a strong, unique password for your tk baji account, enable two-factor authentication where available, and never share your login credentials with any other person. tk baji will never ask you to disclose your password via email, live chat, or any other communication channel.

As a player on the tk baji platform, you hold a number of rights in relation to your personal data. tk baji is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact customer support via live chat or by emailing [email protected].

Right of Access

You have the right to request a copy of the personal data that tk baji holds about you. We will provide this information in a structured, commonly used format within a reasonable timeframe of receiving a verified request.

Right to Rectification

If any personal data held by tk baji is inaccurate or incomplete, you have the right to request that it be corrected or updated. Minor corrections to contact details (such as email address or phone number) can typically be made through your account settings. More significant corrections — such as legal name changes — will require submission of supporting documentation.

Right to Erasure

You may request that tk baji delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other legal basis for processing applies. Please note that this right is subject to exceptions: tk baji is required by anti-money-laundering and financial record-keeping regulations to retain certain categories of data for defined periods even after account closure, and erasure requests cannot override these statutory obligations.

Right to Restrict Processing

In certain circumstances — such as where you have contested the accuracy of data held about you and a verification process is underway — you have the right to request that tk baji restricts its processing of your data to storage only, pending resolution of the matter.

Right to Object

You have the right to object to processing carried out on the basis of tk baji's legitimate interests, including profiling for responsible gaming purposes and aggregated analytics. Where you raise a valid objection, tk baji will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

Where processing is based on your consent — in particular, the receipt of marketing communications — you may withdraw that consent at any time by contacting customer support. Withdrawal of consent does not affect the lawfulness of any processing that took place prior to the withdrawal.

Updates to This Policy

tk baji reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or platform functionality. The effective date at the top of this document indicates when the current version came into force. Where an update materially changes how we process your personal data, we will notify registered players via their registered email address or through a prominent notice on the platform prior to the change taking effect. Your continued use of the tk baji platform following the effective date of any updated policy constitutes acceptance of the revised terms.

We encourage players to review this Privacy Policy regularly. Previous versions of this policy are available on request by contacting customer support.

How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or tk baji's data practices, please contact our support team at any time:

• Live Chat: Available 24/7 via the tk baji platform
• Email: [email protected] (plain text — not a clickable link)

We aim to respond to all privacy-related enquiries within five business days. For complex requests — such as a formal subject access request or an erasure request involving KYC records — we may require up to 30 days to process your request fully, and will acknowledge receipt within 48 hours.