Tk6668 Privacy Policy — How Your Information Is Kept Secure

Welcome to the tk6668 (https://tk6668.ws) Privacy Policy. This policy explains how tk6668 collects, uses, and protects your personal information, and under what circumstances it may be shared.

This Privacy Policy applies to all tk6668 services, websites, mobile applications, and related platforms. By using any tk6668 service, you agree to the terms of this Privacy Policy.

We believe privacy is a fundamental right. That's why tk6668 was designed from the ground up to collect only the minimum data necessary and to protect it with the highest level of security.

Tk6668 only collects information that is essential for providing services, ensuring security, and meeting legal requirements.

2.1 Information collected at registration:

• Full Name (as per National ID)
• Date of birth (for age verification)
• Mobile number and email address
• Home address (city and district)
• Login password (encrypted)

2.2 Information collected during KYC verification:

• Scanned Copy of National ID (NID) or Passport
• Selfie or live photo (for facial verification)
• Proof of address (utility bill or bank statement)
• Proof of Payment Method Ownership

2.3 Data Collected Automatically During Use:

• IP Address & Device Type
• Browser Type & Operating System
• Time spent on the platform and page visit logs
• Transaction History & Amount
• Gaming patterns and preferences (used to improve our services)

Tk6668 uses your information only for specific, legitimate purposes. The table below outlines the purpose and legal basis for each use:

Tk6668 never uses your data beyond its original purpose. Your consent is obtained before any marketing emails or SMS are sent, and you can unsubscribe at any time.

Tk6668 does not sell your data. However, limited information is shared with trusted partners as necessary to provide our services:

4.1 Payment processors: Financial information necessary to process transactions via bKash, Nagad, and Rocket is shared with those providers. This information is protected under their respective privacy policies.

4.2 Game providers: Only the information necessary to manage game sessions is shared with game providers such as Pragmatic Play, Evolution, and PG Soft.

4.3 Legal Authorities: We may be required to disclose information in response to a court order or a lawful request from law enforcement authorities.

4.4 Security Experts: Third-party security experts may be granted limited data access for platform security audits.

Tk6668 uses a multi-layered security system to protect your data. Each layer serves as a separate line of defense:

5.1 Transport Security: All data transmitted between your browser and our servers is encrypted using TLS 1.3. The padlock icon in your browser confirms this protection is active.

5.2 Storage Security: Sensitive data stored in our database is encrypted using the AES-256 algorithm. Passwords are never stored in plain text — only bcrypt hashes are kept.

5.3 Access Control:

• Two-factor authentication (2FA) — SMS or app-based OTP
• Automatic lockout upon detection of suspicious login attempts
• Staff access to data is role-based
• Automatic blocking of suspicious IP addresses

5.4 Server Security: tk6668's servers are housed in ISO 27001-certified data centres, with regular backups and a comprehensive disaster recovery plan in place.

Cookies are small text files stored in your browser. tk6668 uses the following types of cookies:

You can manage cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of certain platform features.

Tk6668 retains your data only for as long as necessary to fulfil its original purpose. Retention periods vary depending on the type of information:

• Account information: For the duration of account activity + 7 years after closure (as required by law)
• Transaction records: 7 years after the last transaction (in accordance with financial regulatory requirements)
• KYC documents: 5 years after account closure
• Customer support conversations: 3 Years
• Browsing logs & cookies: 6 months up to a maximum of 1 year
• Marketing consent records: 3 Years from Consent Withdrawal

Once the retention period expires, data is permanently deleted — either automatically or manually. "Deletion" means complete removal from backups as well, not just from the database.

As a tk6668 member, you may exercise the following rights at any time. We aim to fulfil every request within 30 days:

Tk6668 is strictly not intended for anyone under the age of 18. We do not knowingly collect any data from minors.

Age verification steps are taken at the time of registration. However, if a minor creates an account using false information and this comes to our attention:

• The account will be closed immediately
• All collected data will be permanently deleted
• Refund of deposited funds will be assessed based on the circumstances

If a parent or guardian has any concerns, please contact us immediately at support@tk6668.ws.

Some of tk6668's game providers and technology partners are based overseas, which means your data may occasionally be transferred internationally.

The following protections are ensured for international transfers:

• The receiving party must adhere to equivalent privacy protection standards
• Encryption is mandatory during all data transfers
• Only the minimum necessary data is shared (data minimization)
• Sensitive data is never unnecessarily transferred abroad

Tk6668 may update this Privacy Policy from time to time. Changes may be prompted by:

• Legal or regulatory changes
• Addition of new services or technologies
• Security Process Improvements
• Member Feedback & Opinions

For significant changes, we will notify you by email and on the platform at least 30 days in advance. Minor editorial updates will only reflect a new "Last Updated" date.

Continued use of tk6668 after any changes will be considered acceptance of the updated policy.

For any questions, complaints, or requests to exercise your rights regarding this Privacy Policy, please contact us:

When a data protection rights request is submitted, we will verify your identity and respond within 30 days. For complex requests, this may be extended by up to 60 days — you will be notified in advance if that is the case.