tbk99 Privacy Policy — Your Data, Your Rights

tbk99 operates the online casino and sports betting platform accessible at tbk99.app. In providing this service to players based primarily in Bangladesh, tbk99 collects and processes certain personal data. This Privacy Policy ("Policy") describes the categories of personal data we collect, the purposes for which we process that data, the circumstances in which we may share it with third parties, the measures we take to keep it secure, and the rights you have in relation to your personal data.

By registering a tbk99 account, making a deposit, or otherwise using the tbk99 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please do not use the tbk99 platform. This Policy should be read alongside the tbk99 Terms and Conditions, which are available on this site. If there is any conflict between this Policy and the Terms and Conditions, the Terms and Conditions prevail.

tbk99 collects personal data from you directly (when you register, make a deposit, place a wager, or contact support) and automatically (through standard platform and session analytics). The categories of personal data we collect include:

• Identity and contact information: your full name, date of birth, Bangladesh mobile number, and email address (where provided) submitted at account registration. This data is required to create and maintain your tbk99 account and to perform age verification as required under our responsible gaming obligations.
• KYC identity verification documents: National ID card (NID), passport, or driving licence submitted when tbk99 requests identity verification. These documents are processed in accordance with our KYC obligations and are stored securely with access restricted to authorised compliance personnel only.
• Financial transaction data: deposit amounts, withdrawal amounts, payment method identifiers (your bKash or Nagad account number used for transactions), transaction timestamps, and transaction reference numbers. tbk99 does not store full card numbers, CVV codes, or full bank account numbers.
• Gaming activity data: records of games played, bets placed, amounts wagered, game session durations, bonus claims, and sports betting selections. This data is retained for the purposes of account management, dispute resolution, regulatory compliance, and responsible gaming monitoring.
• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and session timestamps. This technical data is collected automatically when you access tbk99.app and is used for fraud prevention, platform optimisation, and security monitoring.

tbk99 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data. The only category that may be considered sensitive is identity document data collected as part of KYC verification, which is handled with a higher level of security and access restriction than standard account data.

tbk99 processes your personal data on one or more of the following lawful bases, depending on the specific processing activity:

• Contractual necessity: processing that is necessary to perform the contract between you and tbk99 — that is, to provide the tbk99 gaming and betting service. This includes account creation, payment processing, game delivery, and customer support.
• Legal obligation: processing that is necessary to comply with applicable laws and regulations, including anti-money-laundering (AML) laws, KYC requirements, age verification obligations, and any reporting obligations to competent authorities.
• Legitimate interests: processing that is necessary for tbk99's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the tbk99 platform — provided those interests are not overridden by your privacy rights.
• Consent: where tbk99 relies on your consent as the basis for a specific processing activity (for example, sending you promotional communications about tbk99 bonuses and offers), you may withdraw that consent at any time by contacting [email protected]. Withdrawing consent will not affect the lawfulness of any processing carried out prior to withdrawal.

Financial transaction records — including deposit and withdrawal amounts, dates, and the mobile wallet or bank identifiers used — are retained by tbk99 for a minimum of five years from the date of the transaction. This retention period is required for compliance with anti-money-laundering recordkeeping obligations. tbk99 does not store full card numbers, card security codes (CVV/CVC), or full bank account numbers on its own systems. Payment card data is tokenised and processed exclusively by the relevant card network or payment processor.

KYC identity documents — National ID cards, passports, and driving licences submitted for verification — are stored in an encrypted document management system with access restricted to authorised compliance team members only. KYC documents are not shared with game providers, marketing partners, or any third party other than identity verification service providers engaged for the specific purpose of conducting KYC checks. Verified KYC documents are retained for a minimum of five years after account closure to meet applicable regulatory obligations.

tbk99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following retention periods apply to the main categories of personal data held by tbk99: account registration data is retained for the duration of your active account and for a minimum of five years after account closure; financial transaction records are retained for a minimum of five years from the date of the transaction; KYC documents are retained for a minimum of five years after account closure; game activity logs are retained for three years from the date of the relevant activity; customer support records are retained for two years from the date of the last support interaction.

When a retention period expires, tbk99 will securely delete or anonymise the relevant personal data so that it can no longer be associated with any identifiable individual. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for aggregate analytics purposes, as anonymised data falls outside the scope of personal data protection obligations.

As a tbk99 player, you have the following rights in relation to the personal data tbk99 holds about you. To exercise any of these rights, please submit a written request to [email protected] from the email address or mobile number registered to your tbk99 account. tbk99 will respond to all privacy rights requests within 30 days of receipt.

• Right of access: you have the right to request a copy of the personal data that tbk99 holds about you, together with information about how it is used and with whom it has been shared. tbk99 will provide this information in a commonly used electronic format within 30 days of a verified request.
• Right to rectification: if any personal data tbk99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. This right applies to your account registration details, contact information, and KYC-related records.
• Right to erasure: you have the right to request deletion of your personal data, subject to tbk99's legal retention obligations. Where tbk99 is legally required to retain certain data (for example, financial transaction records required under AML laws), we will retain that data for the legally mandated period and delete it thereafter.
• Right to restriction: you have the right to request that tbk99 restrict its processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved, or where you have objected to processing based on legitimate interests and tbk99 is considering your objection.
• Right to data portability: where tbk99 processes your personal data on the basis of your consent or contractual necessity and the processing is carried out by automated means, you have the right to receive a copy of that data in a structured, commonly used, machine-readable format and to request that tbk99 transmit it directly to another data controller where technically feasible.

To submit a privacy rights request, please email [email protected] with the subject line "Privacy Rights Request" and include your registered mobile number and a brief description of the right you wish to exercise. tbk99 may need to verify your identity before processing your request. Verification is carried out to protect your data against unauthorised access requests made by third parties purporting to be you.

tbk99 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, tbk99 will post a notice on the tbk99.app homepage and update the "Last Updated" date at the top of this page. Your continued use of the tbk99 platform following publication of a revised Privacy Policy constitutes your acceptance of the changes. If the revised Policy requires your active consent for a specific new processing activity, tbk99 will seek that consent separately before commencing the new processing.