tko9 Privacy Policy

1. Introduction

tko9 is Bangladesh's leading English-language online gaming platform, offering cricket betting, live casino, slots, crash games, and sports wagering to players aged 21 and above. As part of operating this platform, tko9 necessarily collects and processes certain categories of personal data from registered players and website visitors.

This Privacy Policy sets out in plain, professional English exactly what personal data tko9 collects, the purposes for which it is used, the legal basis upon which it is processed, how long it is retained, who it may be shared with, and what rights you hold as a data subject. We encourage all tko9 players to read this Policy in full and to contact our support team if any aspect is unclear.

tko9 is committed to handling your personal data with integrity, transparency, and respect. We do not view your personal information as a commercial asset and we will never sell it to third parties for marketing purposes. Our data practices are designed to support the safe, fair, and responsible operation of the tko9 platform for all players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

2. Information We Collect

tko9 collects personal data through several channels depending on how you interact with our platform. The categories of information we collect are described below.

2.1 Registration Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are aged 21 or above)
• Email address and mobile phone number
• Residential address (city, district, postal code)
• Preferred currency (Bangladeshi Taka / BDT)
• Username and hashed password (passwords are never stored in plain text)

2.2 Identity Verification (KYC) Data

To comply with Know Your Customer (KYC) obligations and to prevent fraud, underage gambling, and money laundering, tko9 may request the following documents:

• Copy of a government-issued photo ID (National ID card, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or similar, dated within 90 days)
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account registered in your name)
• Source of funds documentation for high-value transactions

2.3 Financial Transaction Data

• Deposit and withdrawal amounts, timestamps, and payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard)
• Transaction reference IDs assigned by payment gateways
• Account balance history for audit and compliance purposes

2.4 Gameplay and Betting Data

• Bet history, game session duration, wagering amounts, win/loss records
• Sport and game preferences (e.g., cricket, volleyball, slots, live casino)
• Bonus usage and promotional participation history

2.5 Technical and Device Data

• IP address and approximate geolocation (country and city level)
• Device type, browser version, and operating system
• Session logs including login timestamps and duration
• Cookies and similar tracking technologies (see Section 6)

2.6 Communications Data

• Records of live chat conversations with our support team
• Email correspondence related to account queries, disputes, or complaints
• Responses to optional player surveys or feedback forms

3. How We Use Your Data

tko9 uses the personal data it collects for the following clearly defined purposes:

tko9 does not use your personal data for any purpose beyond those listed above. Any new use of personal data that falls outside this scope will be communicated to you before processing begins, and where required, your explicit consent will be obtained.

4. Legal Basis for Processing

tko9 processes personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to create and manage your tko9 account, process your deposits and withdrawals, and deliver the gaming services you have contracted for.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, age verification obligations, and any reporting duties to competent authorities including the Bangladesh Financial Intelligence Unit (BFIU).
• Legitimate interests: Processing conducted for fraud prevention, platform security, responsible gaming monitoring, and the improvement of tko9 services — provided these interests are not overridden by your fundamental privacy rights.
• Consent: Processing for optional marketing communications, personalised promotions, and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

tko9 does not sell, rent, or trade your personal data. We may share your data only with the following categories of third party, and only to the extent strictly necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, and card processing partners (Visa/Mastercard acquirers) receive transaction data necessary to process your deposits and withdrawals. These partners are bound by their own data protection standards.
• KYC and identity verification providers: tko9 may use certified third-party identity verification services to validate government-issued ID documents and proof-of-address submissions. These services process data solely for the purpose of KYC compliance.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe may receive anonymised gameplay session data for the purpose of game performance monitoring and fair-play certification. They do not receive personally identifiable registration data.
• Regulatory and law enforcement authorities: tko9 will disclose personal data to competent authorities — including the BFIU and law enforcement agencies — when required to do so by law, court order, or regulatory directive. We will not notify you of such disclosures where we are legally prohibited from doing so.
• Fraud prevention networks: In cases of suspected fraud, money laundering, or collusion, tko9 may share relevant data with industry fraud-prevention bodies and affiliated platforms to protect the integrity of the gaming ecosystem.
• IT and hosting providers: tko9 uses third-party cloud infrastructure and cybersecurity services to operate the platform. These providers act as data processors under strict contractual data protection obligations and may not use your data for any independent purpose.

6. Cookies and Tracking Technologies

tko9 uses cookies and similar tracking technologies to ensure the platform functions correctly, to measure performance, and to deliver a personalised experience. Cookies are small text files stored on your device when you visit tko9.io. They do not contain executable code and cannot access other data on your device.

Categories of cookies used by tko9:

• Strictly necessary cookies: Required for the platform to function. These include session management cookies, authentication tokens, and security cookies. You cannot opt out of these cookies while using tko9.
• Functional cookies: Remember your preferences such as language setting, preferred sports category, and display options. Disabling these may reduce your experience quality.
• Analytics cookies: Collect anonymised data about how players interact with the tko9 platform — such as which game categories are most visited — to help us improve our services. These cookies do not identify you personally.
• Marketing cookies (consent required): Used to deliver relevant promotions based on your betting and gaming history. These are only set with your explicit consent and can be withdrawn at any time via your browser or account settings.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the tko9 platform, including your ability to log in and place bets.

7. Data Security

tko9 takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or destruction.

• 256-bit SSL/TLS encryption is applied to all data transmitted between your device and the tko9 servers, ensuring that your login credentials, payment details, and personal data cannot be intercepted in transit.
• AES-256 encryption at rest is applied to sensitive data fields stored in tko9 databases, including identity documents and financial records.
• Password hashing: Passwords are stored using a strong, salted cryptographic hashing algorithm. tko9 staff cannot retrieve your plain-text password under any circumstances.
• Two-factor authentication (2FA) is available to all tko9 players and is strongly recommended. Enabling 2FA adds a critical additional layer of protection to your account beyond your password alone.
• Access controls: Personal data is accessible only to tko9 staff members who have a legitimate operational need. Access is governed by role-based permissions and audit logging.
• Penetration testing and security audits are conducted regularly to identify and remediate vulnerabilities in the tko9 platform and infrastructure.
• Incident response: In the unlikely event of a data breach that poses a risk to your rights and freedoms, tko9 will notify affected players and relevant authorities as promptly as possible in accordance with applicable legal requirements.

While tko9 employs industry-standard security practices, no electronic system is entirely immune to risk. We encourage all players to use strong, unique passwords for their tko9 accounts and to enable 2FA to maximise their account security.

8. Data Retention

tko9 retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or for such longer period as is required by law or regulation. The table below summarises our standard retention periods by data category:

When the applicable retention period expires, tko9 will securely delete or anonymise your personal data so that it can no longer be attributed to you. Anonymised and aggregated data may be retained indefinitely for statistical and research purposes without restriction.

9. Your Rights

As a tko9 player, you have the following rights over your personal data. To exercise any of these rights, contact our support team at the address provided in Section 14.

• Right of access: You may request a copy of the personal data tko9 holds about you, free of charge, within 30 days of your request.
• Right to rectification: If any of the personal data tko9 holds about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to erasure ("right to be forgotten"): You may request that tko9 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the processing is unlawful. This right is subject to overriding legal obligations — for example, tko9 cannot erase financial records required for AML compliance during the mandatory retention period.
• Right to restrict processing: You may request that tko9 temporarily restrict the processing of your personal data in certain circumstances, such as while a dispute about its accuracy is resolved.
• Right to data portability: You have the right to receive the personal data you provided to tko9 in a structured, commonly used, machine-readable format, and to have it transmitted to another service provider where technically feasible.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on legitimate interests, though tko9 may be entitled to continue processing if it can demonstrate compelling legitimate grounds.
• Right to withdraw consent: Where tko9 processes your personal data on the basis of your consent (e.g., for marketing emails or optional cookies), you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

10. Children and Minors

tko9 employs age verification procedures during the registration process and as part of its KYC checks specifically to prevent access by minors. If tko9 discovers or is notified that it has inadvertently collected personal data from an individual under the age of 21, it will immediately suspend the relevant account, void any associated bets or balances, and permanently delete the personal data in question.

If you are a parent or guardian and believe that a person under 21 in your care has created a tko9 account, please contact our support team immediately at the email address in Section 14. We will investigate and act promptly.

11. Third-Party Links

The tko9 platform may contain references to third-party services such as game providers, payment platforms, or sports data feeds. These third parties operate their own privacy policies and tko9 has no control over how they collect or process your personal data when you interact with their services directly.

tko9 is not responsible for the privacy practices of third-party service providers. We encourage you to review the privacy policies of any third-party service you interact with in connection with your tko9 gaming activity, including payment method providers such as bKash, Nagad, and Rocket.

12. Marketing Communications

With your consent, tko9 may send you promotional communications by email or SMS about new games, deposit bonuses, seasonal promotions (such as Eid special offers, Pohela Boishakh bonuses, BPL cricket promotions, or T20 World Cup betting features), and platform updates.

You can opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any promotional email from tko9
• Updating your communication preferences in your tko9 account settings
• Contacting our support team and requesting removal from all marketing lists

Please allow up to 5 business days for opt-out requests to take effect across all communication channels. Opting out of marketing will not affect transactional communications such as deposit confirmations, withdrawal notifications, or account security alerts — these will continue to be sent as they are necessary for the operation of your account.

13. Changes to This Policy

tko9 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform operations. When we make material changes to this Policy, we will notify registered players via the email address on file and post the updated Policy on tko9.io with a revised effective date.

Your continued use of the tko9 platform following notification of changes to this Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with the changes, you should cease using the platform and may request account closure by contacting our support team.

We recommend reviewing this Privacy Policy periodically to stay informed about how tko9 protects your data. All previous versions of this Policy are available upon request from our support team.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how tko9 has handled your personal data, please contact our support team. All privacy-related enquiries are handled by our English-language support team, available 24 hours a day, 7 days a week.

When submitting a data rights request, please include your registered username and the email address associated with your tko9 account so that we can verify your identity before processing the request. tko9 will not process data rights requests submitted from an unverified email address.